CVE-2026-81291

Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions.

• Published Aug 31, 2026
• CVSS 7.1 high
• 0.3% chance of exploitation in the next 30 days (EPSS)

CVE-2026-81291 at the National Vulnerability Database