PatchSiren

Archetyped CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Archetyped CVE published 2026-06-15

CVE-2026-42649

CVE-2026-42649 is a HIGH-severity vulnerability with a CVSS score of 7.1. It is an Unauthenticated Cross Site Scripting (XSS) issue affecting Favicon Rotator versions up to and including 1.2.11. The vulnerability was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-42649) and last modified on [cveModifiedAt](https://nvd.nist.gov/vuln/detail/CVE-2026-42649).