Reflected XSS Vulnerability in Netron Desktop Application by Lutz Roeder

CVE-2026-79720

What is CVE-2026-79720?

A reflected XSS vulnerability exists in the Netron desktop application, specifically in versions up to 9.1.2. This flaw originates from the handling of unsanitized node names, allowing an attacker to manipulate the application's interface. By exploiting this vulnerability, an attacker could potentially hide nodes, conduct port scanning activities, or leverage a known Chrome exploit to gain remote access control of the affected system.

References