All 6 CVE vulnerabilities found in vnote, with AI-generated Chinese analysis, references, and POCs.
Vendor: vnotex
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-86022 | VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling CWE-78 | 7.0 | High | 2026-10-13 |
| CVE-2026-86016 | VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration CWE-79 | 8.2 | High | 2026-10-13 |
| CVE-2026-15505 | vnotex vnote YAML Frontmatter markdownit.js cross site scripting CWE-79 | 3.5 | Low | 2026-07-12 |
| CVE-2024-41662 | VNote vulnerable to Markdown XSS, which leads to RCE CWE-79 | 8.6 | High | 2024-07-24 |
| CVE-2024-39904 | Code Execution Vulnerability via Local File Path Traversal in Vnote CWE-73 | 8.8 | High | 2024-07-11 |
| CVE-2023-5701 | vnotex vnote Markdown File cross site scripting CWE-79 | 4.3 | Medium | 2023-10-23 |
All 6 known CVE vulnerabilities affecting vnote with full Chinese analysis, references, and POCs where available.