Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-109556

EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC

EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview stored cross-site scripting, can call probeAcpAdapter to launch local executables with the user's privileges.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Tianma-if
Products
Edgeever
CVE-2026-109557

EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP create_notebook, rename_notebook or create_memo tools, running script on drag with access to the desktop bridge's session token.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Tianma-if
Products
Edgeever
CVE-2026-108727

EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes

EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass token scope restrictions because template handlers never call requireScopes. Attackers with a token lacking write:memos can save a template and invoke POST /api/v1/templates/:id/use to create memos, and list, modify, or delete templates in the token owner's workspace.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tianma-if
Products
Edgeever
CVE-2026-109558

EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview

EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token to run script on preview and access the privileged window.edgeeverDesktop bridge.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tianma-if
Products
Edgeever
CVE-2026-109559

EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-navigate

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to obtain the edgeeverDesktop bridge including session token, sidecar RPC, and ACP channels.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Tianma-if
Products
Edgeever