CVE-2026-121578

UNKNOWN 0.0

CVE-2026-121578

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields, enabling HTML/JavaScript to be stored in the tools database, which is then executed in the browsers of users when they view content containing the infected objects, leading to account takeover or code execution.

Vendor	amidaware
Product	tactical rmm
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for amidaware tactical rmm

Be the first to know when new unknown vulnerabilities affecting amidaware tactical rmm are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Amidaware / Tactical RMM

0 ≤ 1.6.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/amidaware/tacticalrmm-web/commit/ba5363ea99cf776511e5c828b6d744e4d0bddd08 github.com: https://github.com/Kuri119/Stored-XSS-In-Tactical-RMM-1.5.2/tree/main