Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-39423

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an Eval Injection vulnerability in the Markdown rendering engine that allows any user capable of interacting with the AI chat interface to execute arbitrary JavaScript in the browsers of other users, including administrators, resulting in Stored Cross-Site Scripting (XSS). This issue has been fixed in version 2.8.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.1%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-39423
  • Maxkb » Maxkb » Version: 0.9.0
    cpe:2.3:a:maxkb:maxkb:0.9.0
  • Maxkb » Maxkb » Version: 0.9.1
    cpe:2.3:a:maxkb:maxkb:0.9.1
  • Maxkb » Maxkb » Version: 1.0.0
    cpe:2.3:a:maxkb:maxkb:1.0.0
  • Maxkb » Maxkb » Version: 1.0.1
    cpe:2.3:a:maxkb:maxkb:1.0.1
  • Maxkb » Maxkb » Version: 1.0.2
    cpe:2.3:a:maxkb:maxkb:1.0.2
  • Maxkb » Maxkb » Version: 1.0.3
    cpe:2.3:a:maxkb:maxkb:1.0.3
  • Maxkb » Maxkb » Version: 1.0.4
    cpe:2.3:a:maxkb:maxkb:1.0.4
  • Maxkb » Maxkb » Version: 1.1.0
    cpe:2.3:a:maxkb:maxkb:1.1.0
  • Maxkb » Maxkb » Version: 1.1.1
    cpe:2.3:a:maxkb:maxkb:1.1.1
  • Maxkb » Maxkb » Version: 1.1.2
    cpe:2.3:a:maxkb:maxkb:1.1.2
  • Maxkb » Maxkb » Version: 1.1.3
    cpe:2.3:a:maxkb:maxkb:1.1.3
  • Maxkb » Maxkb » Version: 1.2.0
    cpe:2.3:a:maxkb:maxkb:1.2.0
  • Maxkb » Maxkb » Version: 1.2.1
    cpe:2.3:a:maxkb:maxkb:1.2.1
  • Maxkb » Maxkb » Version: 1.3.0
    cpe:2.3:a:maxkb:maxkb:1.3.0
  • Maxkb » Maxkb » Version: 1.3.1
    cpe:2.3:a:maxkb:maxkb:1.3.1
  • Maxkb » Maxkb » Version: 1.4.0
    cpe:2.3:a:maxkb:maxkb:1.4.0
  • Maxkb » Maxkb » Version: 1.4.1
    cpe:2.3:a:maxkb:maxkb:1.4.1
  • Maxkb » Maxkb » Version: 1.5.0
    cpe:2.3:a:maxkb:maxkb:1.5.0
  • Maxkb » Maxkb » Version: 1.5.1
    cpe:2.3:a:maxkb:maxkb:1.5.1
  • Maxkb » Maxkb » Version: 1.6.0
    cpe:2.3:a:maxkb:maxkb:1.6.0
  • Maxkb » Maxkb » Version: 1.6.1
    cpe:2.3:a:maxkb:maxkb:1.6.1
  • Maxkb » Maxkb » Version: 1.7.0
    cpe:2.3:a:maxkb:maxkb:1.7.0
  • Maxkb » Maxkb » Version: 1.7.1
    cpe:2.3:a:maxkb:maxkb:1.7.1
  • Maxkb » Maxkb » Version: 1.7.2
    cpe:2.3:a:maxkb:maxkb:1.7.2
  • Maxkb » Maxkb » Version: 1.8.0
    cpe:2.3:a:maxkb:maxkb:1.8.0
  • Maxkb » Maxkb » Version: 1.8.1
    cpe:2.3:a:maxkb:maxkb:1.8.1
  • Maxkb » Maxkb » Version: 1.9.0
    cpe:2.3:a:maxkb:maxkb:1.9.0
  • Maxkb » Maxkb » Version: 1.9.1
    cpe:2.3:a:maxkb:maxkb:1.9.1
  • Maxkb » Maxkb » Version: 2.0.1
    cpe:2.3:a:maxkb:maxkb:2.0.1
  • Maxkb » Maxkb » Version: 2.0.2
    cpe:2.3:a:maxkb:maxkb:2.0.2
  • Maxkb » Maxkb » Version: 2.1.0
    cpe:2.3:a:maxkb:maxkb:2.1.0
  • Maxkb » Maxkb » Version: 2.1.1
    cpe:2.3:a:maxkb:maxkb:2.1.1
  • Maxkb » Maxkb » Version: 2.1.2
    cpe:2.3:a:maxkb:maxkb:2.1.2
  • Maxkb » Maxkb » Version: 2.2.0
    cpe:2.3:a:maxkb:maxkb:2.2.0
  • Maxkb » Maxkb » Version: 2.2.1
    cpe:2.3:a:maxkb:maxkb:2.2.1
  • Maxkb » Maxkb » Version: 2.3.0
    cpe:2.3:a:maxkb:maxkb:2.3.0
  • Maxkb » Maxkb » Version: 2.3.1
    cpe:2.3:a:maxkb:maxkb:2.3.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved