The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
MediumVulnerability
CVE-2026-118087: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-118087
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-118087 is a stored cross-site scripting flaw in Gemini Labs Site Reviews (site-reviews), caused by improper neutralization of input during web page generation. The issue affects Site Reviews from n/a through 8.3.5.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.