Vulnerability Details CVE-2026-79720
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.5%
CVSS Severity