CVE-2026-18320 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Sep 25, 2026 · CERT/CC Vulnerability Notes

   Detected

   Overview Three cross-site scripting (XSS) vulnerabilities identified in Readwise Reader for Android version 8.7.2 are disclosed. An attacker with the ability to craft malicious documents or metadata can exploit these vulnerabilities by supplying poisoned content that bypasses sanitization. Successful exploitation could allow the attacker to execute arbitrary JavaScript within the application's Web

Sources

• CERT/CC Vulnerability NotesGovernment advisoryCVE-2026-18320

  Overview Three cross-site scripting (XSS) vulnerabilities identified in Readwise Reader for Android version 8.7.2 are disclosed. An attacker with the ability to craft malicious documents or metadata can exploit these vulnerabilities by supplying poisoned content that bypasses san

  kb.cert.org
• CVE.orgVulnerability recordCVE-2026-18320

  Official CVE identifier

  cve.org