All 2 CVE vulnerabilities found in cherrytree, with AI-generated Chinese analysis, references, and POCs.
Vendor: giuspen
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-118693 | CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path CWE-36 | 4.7 | Medium | 2026-10-28 |
| CVE-2026-118692 | CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action CWE-78 | 7.0 | High | 2026-10-28 |
All 2 known CVE vulnerabilities affecting cherrytree with full Chinese analysis, references, and POCs where available.