Read the docs

giuspen

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

giuspen records in CISA KEV

No giuspen vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-82218 CVE-2026-118692 · GHSA-3v3v-qqf5-5rqr

OS command injection in CherryTree via custom web link action

Priority HIGH 66

CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers to execute commands by embedding shell metacharacters in web link URLs.

CVSS 4.0HIGH 7.1 Local No auth User interaction EPSS 0.00581 Published 2026-10-28 No fix listed CWE-78
TI-2026-82219 CVE-2026-118693 · GHSA-237p-f2v6-hfc2

Path traversal in CherryTree lets crafted documents embed local files

Priority MEDIUM 58

CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts unvalidated embedded-file 'filename' attributes in XML documents.

CVSS 4.0MEDIUM 5.6 Local No auth User interaction EPSS 0.00141 Published 2026-10-28 No fix listed CWE-36
Open these records in search →