{"vulnerability": "CVE-2024-26006", "sightings": [{"uuid": "1b655719-6bf0-4042-8473-b58f0c464c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26006", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-26006\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:X/RC:X)\n\ud83d\udd39 Description: An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server.\n\ud83d\udccf Published: 2025-03-14T09:24:56.620Z\n\ud83d\udccf Modified: 2025-03-14T09:24:56.620Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-23-485", "creation_timestamp": "2025-03-14T09:45:14.000000Z"}, {"uuid": "a214f8b6-aef4-4bf0-92d8-6056c37510be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdmzwtuda2e", "content": "", "creation_timestamp": "2025-03-14T12:40:54.429183Z"}, {"uuid": "9f195596-9500-4a41-ab27-e7f4dcf8b907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26006", "type": "seen", "source": "https://t.me/cvedetector/20283", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-26006 - FortiOS FortiProxy Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-26006 \nPublished : March 14, 2025, 10:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T12:31:47.000000Z"}]}