CVE-2026-79719
XSS in Netron Enabling Remote Code Execution via Unsanitized Node Names
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.
CVSS 4.0 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products