CVE-2025-26127

Summary

CVE-2025-26127 is a stored cross-site scripting (XSS) vulnerability discovered in FileCloud's Send for Approval function, version 23.241.2. This issue enables attackers to inject arbitrary web scripts or HTML code into the application by crafting specially designed input. Successful exploitation of this vulnerability could lead to unauthorized access to user data or session hijacking, posing a significant risk to the confidentiality and integrity of affected systems. Users are advised to update their FileCloud installation to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.