Browse all 6 CVE security advisories affecting vnotex. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Vnotex is a note-taking application designed for organizing information and managing documents. Historically, vulnerabilities in this software have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and access control issues. The application has recorded three CVEs, with one notable incident involving an RCE vulnerability that allowed attackers to execute arbitrary code through crafted file imports. Security assessments have consistently identified weaknesses in input sanitization and session management, highlighting the importance of regular updates and careful handling of untrusted files.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-86022 | VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling — vnote CWE-78 | 7.0 | High | 2026-10-13 |
| CVE-2026-86016 | VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration — vnote CWE-79 | 8.2 | High | 2026-10-13 |
| CVE-2026-15505 | vnotex vnote YAML Frontmatter markdownit.js cross site scripting — vnote CWE-79 | 3.5 | Low | 2026-07-12 |
| CVE-2024-41662 | VNote vulnerable to Markdown XSS, which leads to RCE — vnote CWE-79 | 8.6 | High | 2024-07-24 |
| CVE-2024-39904 | Code Execution Vulnerability via Local File Path Traversal in Vnote — vnote CWE-73 | 8.8 | High | 2024-07-11 |
| CVE-2023-5701 | vnotex vnote Markdown File cross site scripting — vnote CWE-79 | 4.3 | Medium | 2023-10-23 |
This page lists every published CVE security advisory associated with vnotex. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.