A vulnerability classified as problematic has been found in ory polis up to 26.1.x. This affects an unknown function. This manipulation causes improper neutralization of alternate xss syntax.

The identification of this vulnerability is CVE-2026-33506. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.