Severity:
CRITICAL RISK
(10.0)
Sandbox Escape via Unrestricted Async Function Construction (CWE-94) in SandboxJS
CVE-2026-23830
Published:
Jan 27, 2026
Status:
Received
Summary
Affected Context
Exploit Preconditions
Why This Happens
Potential Impact
General Mitigation Guidance
How Teams Detect Issues Like This
Frequently Asked Questions
Reference Link
Recent Vulnerabilities
CWE-79
(7.6)
Stored Cross-Site Scripting (CWE-79) in DNN Persona Bar Module Friendly Names
Stored Cross-Site Scripting leading to admin session compromise and UI takeover
January 27, 2026
CWE-79
(7.6)
Stored Cross-Site Scripting (CWE-79) in DNN PersonaBar Log Notes
Stored Cross-Site Scripting leading to privilege abuse in the admin UI
January 27, 2026
