CVE-2026-10729
NONE—CVSS v3
—CVSS v2
0.05%
EPSS (exploit probability)
CWE-74CWE
Description
An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails.
This issue affects Canarytokens: from Docker tag sha-c42435e before sha-bfda4df, from Git commit c42435e before bfda4df.
Affected routers (0)
No routers currently mapped to this CVE in our database.