Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG <script> elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.

According to its self-reported version number, Angular is prior to 19.0.0, 19.x prior to 19.2.18, 20.x prior to 20.3.16 or 21.x prior to 21.0.7. It is, therefore, affected by a Cross-Site Scripting (XSS) vulnerability in the Angular template compiler. The href and xlink:href attributes of SVG <script> elements are not classified as a resource URL context, allowing user-controlled data bound to these attributes to load and execute malicious scripts. (CVE-2026-22610)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angulars internal sanitization schema fails to recognize the href and xlink:href attributes of SVG <script> elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Angular is a development platform for building mobile and desktop web applications using
    TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a
    cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The
    vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and
    xlink:href attributes of SVG <script> elements as a Resource URL context. This issue has been patched in
    versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0. (CVE-2026-22610)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Angular is a development platform for building mobile and desktop web applications using     TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a     cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The     vulnerability exists because Angular's internal sanitization schema fails to recognize the href and     xlink:href attributes of SVG <script> elements as a Resource URL context. This issue has been patched in     versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0. (CVE-2026-22610)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
115628	Angular < 19.2.18 Cross-Site Scripting	Web App Scanning	Component Vulnerability	Version Based	high
115627	Angular 19.x < 19.2.18 Cross-Site Scripting	Web App Scanning	Component Vulnerability	Version Based	high
115626	Angular 20.x < 20.3.16 Cross-Site Scripting	Web App Scanning	Component Vulnerability	Version Based	high
115625	Angular 21.x < 21.0.7 Cross-Site Scripting	Web App Scanning	Component Vulnerability	Version Based	high
505441	Siemens RUGGEDCOM RST2428P Cross-site Scripting (CVE-2026-22610)	Tenable OT Security	Tenable.ot	Remote	high
436675	SCA: security update for @angular/compiler, @angular/core (GHSA-jrmj-c5cx-3cw6)	Tenable Cloud Security	SCA Checks	Local	high
436675	SCA: security update for @angular/compiler, @angular/core (GHSA-jrmj-c5cx-3cw6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
282567	Linux Distros Unpatched Vulnerability : CVE-2026-22610	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-22610

high

Tenable Plugins

high

high

high

high

high

high

high

high