Severity:

HIGH RISK

(8.4)

Cross-Site Scripting (XSS) in 1xxx Series NVR Web Interface

CVE-2026-6824

Published:

29 May 2026

Status:

Awaiting Analysis

Summary

Affected Context

Exploit Preconditions

Why This Happens

Potential Impact

General Mitigation Guidance

How Teams Detect Issues Like This

Frequently Asked Questions

Source

NDV

Recent Vulnerabilities

CWE-74;CWE-94

HIGH RISK

HIGH

(7.3)

Code Injection (CWE-94) in ANTLR4 Grammar Action Block

Arbitrary Code Execution in Generated Artifacts

28 June 2026

CWE-74;CWE-89

HIGH RISK

HIGH

(7.3)

SQL Injection (CWE-89) in Restaurant Password Reset

Authentication Data Exposure and Account Compromise

28 June 2026

Vulnerability Type

Vulnerability Type

Category:

Cross-Site Scripting (XSS)

CWE:

CWE-79

Impact:

Session Hijacking and Unauthorized Actions via Stored XSS

Severity:

HIGH RISK

(8.4)

CVSS Version:

3.1

Vulnerability Type

Category:

Cross-Site Scripting (XSS)

CWE:

CWE-79

Impact:

Session Hijacking and Unauthorized Actions via Stored XSS

Severity:

HIGH RISK

(8.4)

CVSS Version:

3.1

Catch This CVE While Code Is Being Written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Ship clean & secure code faster

Start Free Trial

Start Free Trial

Get Pentest Report

Get Pentest Report

Ship clean & secure code faster

Start Free Trial

Start Free Trial

Get Pentest Report

Get Pentest Report

Ship clean & secure code faster

Start Free Trial

Start Free Trial

Get Pentest Report

Get Pentest Report

CodeAnt AI is an offensive and defensive security platform.

Defensive + offensive security.

From first line of code to a pentest
that knows every line of it.

SOC 2 Type II certified | CodeAnt AI is independently audited and compliant with SOC 2 Type II security standards

CodeAnt AI is HIPAA compliant

Ask AI for summary of CodeAnt

Copyright © 2026 CodeAnt AI. All rights reserved.

CodeAnt AI is an offensive and defensive security platform.

Defensive + offensive security.

From first line of code to a pentest that knows every line of it.

SOC 2 Type II certified | CodeAnt AI is independently audited and compliant with SOC 2 Type II security standards

CodeAnt AI is HIPAA compliant

Ask AI for summary of CodeAnt

Copyright © 2026 CodeAnt AI. All rights reserved.

CodeAnt AI is an offensive and defensive security platform.

Defensive + offensive security.

From first line of code to a pentest that knows every line of it.

SOC 2 Type II certified | CodeAnt AI is independently audited and compliant with SOC 2 Type II security standards

CodeAnt AI is HIPAA compliant

Ask AI for summary of CodeAnt

Copyright © 2026 CodeAnt AI. All rights reserved.