CVE-2026-6179

CVE-2026-6179 is a stored cross-site scripting vulnerability in the NightWolf Penetration Testing Platform that enables attackers to inject and execute malicious scripts within users' browsers. This flaw allows an attacker to compromise the integrity of the affected platform and potentially steal sensitive user information or session credentials. The vulnerability presents a moderate risk profile with a FAUCET Risk Score of 35.0 out of 100. While complete CVSS metrics are unavailable, the stored XSS vector indicates the vulnerability can be exploited through persistent payload injection, and the impact extends to any user who accesses the compromised content in their browser. There is currently no evidence of active exploitation in the wild, as the vulnerability does not appear on the Known Exploited Vulnerabilities catalog and remains inactive on threat tracking lists. The low EPSS score of 0.00017 further indicates minimal current exploitation activity. However, organizations using NightWolf should still apply patches promptly given the relative ease of exploiting stored XSS vulnerabilities once discovered.