Skip to content
OpenAdvisories

Vendor

tianma-if

6 known vulnerabilities.

Products

EdgeEver 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.7
    CVE-2026-109559

    EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-navigate

    EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for exam…

    tianma-if EdgeEver
  • High 8.7
    CVE-2026-109557

    EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview

    EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP create_notebook, rename_notebook or cre…

    tianma-if EdgeEver
  • High 8.7
    CVE-2026-109558

    EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview

    EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event …

    tianma-if EdgeEver
  • High 8.0
    CVE-2026-109556

    EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC

    EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as …

    tianma-if EdgeEver