THM-Health CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM THM-Health CVE published 2026-08-06

CVE-2026-71555

CVE-2026-71555 debrief based on the supplied source corpus. PILOS versions from 2.1.0 until 4.14.1 do not send a Cross-Origin-Opener-Policy response header, allowing for reverse tabnabbing attacks. This issue is fixed in version 4.14.1. Users of PILOS should assess exposure and verify the fix to prevent potential phishing attacks via reverse tabnabbing. The vulnerability allows an attacker to manipulate o [truncated]