Executive brief
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Affected products
- PyPI rucio-webui
Junglewise Threat Intelligence
CVE-2026-25733: PYSEC-2026-3058 - Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
CVE-2026-25733 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: rucio-webui (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3055 - Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
- PYSEC-2026-3054 - Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
- PYSEC-2026-3057 - Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
- PYSEC-2026-3053 - Rucio WebUI has Username Enumeration via Login Error Message
- PYSEC-2026-3056 - Rucio WebUI has a Reflected Cross-site Scripting Vulnerability