CVE-2026-77166

Published: Set 21, 2026 Last Modified: Set 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:
LOW 2,4
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: high
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: none

Description

AI Translation Available

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.

https://hackerone.com/reports/3599470
https://hackerone.com/reports/3599470
https://hackerone.com/reports/3599470
https://hackerone.com/reports/3599470