What is CVE-2026-59667?

CVE-2026-59667 is a publicly disclosed cybersecurity vulnerability with a MEDIUM severity rating and CVSS score of 4.8.

How to search for CVE vulnerabilities?

You can search the 4nuxd CVE database using CVE IDs, vendor names, product names, or severity levels.

CVE-2026-59667

MEDIUM4.8/ 10.0

Published: October 2, 2026 at 11:17 AM

Modified: October 2, 2026 at 05:59 PM

Source: cve-coordination@incibe.es

Vulnerability Description

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizemployees/update”.

CVSS Metrics

Base Score

4.8

Severity

MEDIUM

Vector String

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X