What is the severity of CVE-2025-40726?

CVE-2025-40726 has a CVSS v3 score of 0, which is classified as Low severity.

Is there an exploit available for CVE-2025-40726?

No known public exploits are currently available for CVE-2025-40726.

Is there a patch available for CVE-2025-40726?

No official patches have been released yet for CVE-2025-40726. Consider implementing workarounds or mitigations.

CVE Database Threat Actors Research Advisory API Docs

Visit Strobes.co Sign Up for Strobes

CVE Database Threat Actors Research Advisory API Docs

Tools

KB Lookup

Visit Strobes.co Sign Up for Strobes

HomeCVEs

Do you like the insights?

Strobes vulnerability intelligence is a key component of their Exposure Management platform that helps organizations understand, prioritize, and address security vulnerabilities more effectively.

Home CVEsCVE-2025-40726

CVE-2025-40726

Published: February 10, 2026

Last updated:13 hours ago (February 10, 2026)

Exploit: NoZero-day: NoPatch: NoTrend: Neutral

TL;DR

Updated February 10, 2026

CVE-2025-40726 is a low severity vulnerability with a CVSS score of 0.0. No known public exploits at this time.

Key Points

1Low severity (CVSS 0.0/10)
2EPSS: 1.00% - moderate likelihood of exploitation
3

Severity Scores

CVSS v30.0

CVSS v20.0

Priority Score0.0

EPSS Score1.0

None

Cite This Page

APA Format

Strobes VI. (2026). CVE-2025-40726 - CVE Details and Analysis. Strobes VI. Retrieved February 10, 2026, from https://vi.strobes.co/cve/CVE-2025-40726

Quick copy link + title

Please cite this page when referencing data from Strobes VI. Proper attribution helps support our vulnerability intelligence research.

No known public exploits

4No official patches released yet

Exploitation LikelihoodLow

1.00%EPSS

Lower probability of exploitation

Patch during regular maintenance

1.00%

EPSS

0.0

CVSS

Exploit

Patch

Medium Priority

no patch

EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.

Description

Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.

CVSS v3 Breakdown

Attack Vector:-

Attack Complexity:-

Privileges Required:-

User Interaction:-

Scope:-

Confidentiality:-

Integrity:-

Availability:-

Trend Analysis

Neutral

Advisories

GitHub Advisory NVD

CVE-2025-40726 - CVE Details, Severity, and Analysis | Strobes VI