HIGH Published Oct 6, 2026 CVE-2026-104395 CVE-2026-104395 published: Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch