BACULARIS

[ RESEARCH ] - CVE-2026-95166 - Stored XSS in Bacularis 1.0.0 - 6.5.1 - Pool LabelFormat field

30 September 2026·168 words·1 min

RESEARCH CVE-2026-95166 BACULARIS

Stored XSS affects admins or users with PoolList/PoolView. Add an XSS payload to labelFormat in Pools / Add pool; it executes when viewing pool details and running Update pool.

[ RESEARCH ] - CVE-2026-95165 - Stored XSS in Bacularis 5.4.0 - 6.5.1 - Organization name

30 September 2026·226 words·2 mins

RESEARCH CVE-2026-95165 BACULARIS

Stored XSS affects all users via the organization name. Add an organization under Security / Organizations with an XSS payload; it executes when any user clicks its linked logout button.

[ RESEARCH ] - CVE-2026-88743 - Stored XSS in Bacularis 4.7.0 - 6.5.0 - director tags

11 September 2026·446 words·3 mins

RESEARCH CVE-2026-88743 BACULARIS

Stored XSS affects all users via globally accessible tags. Add a global tag in JobDefs and set its value to an XSS payload. Once assigned, it executes for every user who can view jobs.

[ RESEARCH ] - CVE-2026-88742 - Stored Cross Site Scripting (XSS) in Bacularis 1.0.0 - 6.5.0 client address

11 September 2026·266 words·2 mins

RESEARCH CVE-2026-88742 BACULARIS

A stored XSS affects all users who can view client details. Add a client with the XSS payload in the address field, save it, then click Details to execute the payload.