CVE-2026-18516

Summary

A stored XSS vulnerability exists in Crafty Controller's Audit Logs component that allows remote attackers to inject malicious scripts into HTTP headers, which can execute in the context of authenticated users' browsers when they view audit logs. This creates a critical risk for data exfiltration and session hijacking.

Exploitability

Exploitation is relatively straightforward requiring only HTTP header injection via the audit logging component, with no authentication required for initial payload delivery.

Blast radius

If exploited, this vulnerability could allow attackers to steal user sessions, redirect victims to malicious sites, or execute arbitrary JavaScript in the context of affected users' browsers when viewing audit logs.

Detection

Monitor application logs for unusual HTTP header injection patterns in audit log entries, particularly those containing script tags or JavaScript payloads that appear in logged request headers.

Prioritized remediation

Upgrade to Crafty Controller version 2.590 or later to address this stored XSS vulnerability in the Audit Logs component.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.