CVE-2026-39826 Escaper bypass leads to XSS in html/template Information published. EPSS 0.00 CVE-2026-39826 US Microsoft Security · 19. 5. 10:43