CVE-2026-6634

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6634", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-19T19:17:20.429Z", "datePublished": "2026-04-20T11:30:13.847Z", "dateUpdated": "2026-04-20T15:02:48.499Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-20T11:30:13.847Z"}, "title": "usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-285", "lang": "en", "description": "Improper Authorization"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-266", "lang": "en", "description": "Incorrect Privilege Assignment"}]}], "affected": [{"vendor": "usememos", "product": "memos", "versions": [{"version": "0.22.0", "status": "affected"}, {"version": "0.22.1", "status": "affected"}], "cpes": ["cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*"], "modules": ["UpdateInstanceSetting"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-04-19T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-19T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-19T21:22:25.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "davidgilmore (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/358268", "name": "VDB-358268 | usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/358268/cti", "name": "VDB-358268 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/793432", "name": "Submit #793432 | Usememos Memos 0.22.1 Cross Site Scripting", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Dave-gilmore-aus/security-advisories/blob/main/usememos-security-advisory", "tags": ["exploit"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-20T15:02:22.354110Z", "id": "CVE-2026-6634", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T15:02:48.499Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6634", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-20T15:02:22.354110Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T15:02:29.424Z"}}], "cna": {"tags": ["x_open-source"], "title": "usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization", "credits": [{"lang": "en", "type": "reporter", "value": "davidgilmore (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*"], "vendor": "usememos", "modules": ["UpdateInstanceSetting"], "product": "memos", "versions": [{"status": "affected", "version": "0.22.0"}, {"status": "affected", "version": "0.22.1"}]}], "timeline": [{"lang": "en", "time": "2026-04-19T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-19T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-19T21:22:25.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/358268", "name": "VDB-358268 | usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/358268/cti", "name": "VDB-358268 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/793432", "name": "Submit #793432 | Usememos Memos 0.22.1 Cross Site Scripting", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Dave-gilmore-aus/security-advisories/blob/main/usememos-security-advisory", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "Improper Authorization"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-266", "description": "Incorrect Privilege Assignment"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-20T11:30:13.847Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6634", "state": "PUBLISHED", "dateUpdated": "2026-04-20T15:02:48.499Z", "dateReserved": "2026-04-19T19:17:20.429Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-20T11:30:13.847Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*"], "modules": ["UpdateInstanceSetting"], "product": "memos", "vendor": "usememos", "versions": [{"status": "affected", "version": "0.22.0"}, {"status": "affected", "version": "0.22.1"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha identificado una debilidad en usememos memos hasta la versi\u00f3n 0.22.1. Esto afecta a la funci\u00f3n memos_access_token del archivo src/App.tsx del componente UpdateInstanceSetting. Esta manipulaci\u00f3n del argumento additionalStyle/additionalScript causa una autorizaci\u00f3n indebida. El ataque puede llevarse a cabo de forma remota. El exploit se ha hecho p\u00fablico y podr\u00eda ser utilizado para ataques. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-6634", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6634", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-20T15:02:22.354110Z", "version": "2.0.3"}}]}, "published": "2026-04-20T12:16:09.490", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/Dave-gilmore-aus/security-advisories/blob/main/usememos-security-advisory"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/793432"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/358268"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/358268/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-266"}, {"lang": "en", "value": "CWE-285"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.22.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.22.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "memos", "source": "cna", "vendor": "usememos"}, "product": "memos", "vendor": "usememos"}], "analysis": {"en": {"generated_at": "2026-04-20T13:21:07.504141+00:00", "value": {"mitigation_remediation": ["Ensure usememos/memos is upgraded to the latest release that addresses the improper authorization in UpdateInstanceSetting (versions higher than 0.22.1 are recommended).", "If an update cannot be applied immediately, isolate the UpdateInstanceSetting endpoint with network\u2011level controls, such as firewall rules or an API gateway that limits access to trusted IP ranges or requires additional authentication.", "Validate or sanitize the additionalStyle and additionalScript input parameters to enforce proper authentication logic, or disable these features through configuration if the application permits."], "summary": {"action": "Apply Patch", "impact": "Improper Authorization leading to potential remote misuse of memos functionality"}, "threat_synthesis": {"affected_systems": "The vulnerability impacts the usememos memos application up to and including release 0.22.1. All installations of these versions are susceptible if the vulnerable UpdateInstanceSetting component is accessible.", "description_and_impact": "A weakness in usememos memos through version 0.22.1 allows an attacker to influence the memos_access_token function by supplying specially crafted values for additionalStyle and additionalScript, thereby bypassing the normal authorization checks. This flaw is categorized as Broken Authentication (CWE\u2011266) and Improper Authorization (CWE\u2011285). If exploited, unauthorized users could gain access to protected memos, read or modify content that should be restricted, or perform other privileged actions within the application.", "risk_and_exploitability": "The CVSS score of 5.3 indicates medium severity. The vulnerability can be exploited remotely and an exploit has been publicly released, suggesting that it may be actively used. The EPSS score is not available, and the issue is not listed in CISA\u2019s KEV catalog, so the current likelihood of exploitation is uncertain. Nevertheless, because the attack vector is remote and the exploit is available, administrators should treat the risk as moderate with potential for significant impact if the flaw is not remediated."}}}}, "created": "2026-04-20T13:30:05.578119+00:00", "updated": "2026-04-20T13:30:05.708230+00:00", "vendors": ["usememos", "usememos$PRODUCT$memos"]}