WID-SEC-W-2026-2038

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Angular: Mehrere Schwachstellen

view advisory published 2026-06-22

Ein Angreifer kann mehrere Schwachstellen in Angular ausnutzen, um beliebigen Programmcode auszuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2026-54268UShigh7.5—
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial…
CVE-2026-54266USmedium6.1OT elevated—
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, Angular's…
CVE-2026-54265USmedium6.1—
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an issue…
CVE-2026-50178UShigh8.8—
The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the t…
CVE-2026-49241UShigh8.8OT elevated—
The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan