Skip to content
OpenAdvisories

Vendor

toeverything

4 known vulnerabilities.

Products

AFFiNE 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-21853

    AFFiNE: One-click Remote Code Execution through Custom URL Handling

    AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.25.4, there is a one-click remote code execution vulnerability. This vulnerability can be exploited by embedding a specially crafted affine: URL on a website. An attack…

    toeverything AFFiNE