CVE-2026-59659

UNKNOWN

Description

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomZonaGeo” parameter is affected – endpoint “/es/geozones/update/149979”.

Timeline

Published:October 2nd, 2026 10:17 AM

Last modified:October 5th, 2026 5:17 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-79

References & Reports

Advisories, patches, and third-party reports

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repasat-application

Source: NIST NVD · Data may lag official sources by up to one minute