PatchSiren

Bacularis CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Bacularis CVE published 2026-10-05

CVE-2026-95165

A Cross Site Scripting (XSS) vulnerability exists in Bacularis versions 5.4.0 through 6.5.1 in the Organization name field. Defenders managing Bacularis deployments should assess exposure, particularly those allowing user input in the Organization name field, and prioritize verification of affected versions and potential user interactions with the Organization name field. This vulnerability could potentia [truncated]