purocean

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

purocean records in CISA KEV

No purocean vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-85276 CVE-2026-122157 · GHSA-5qjp-6ppp-5274

OS command injection in Purocean Yank Note Terminal handler

MEDIUM 57

A vulnerability was identified in Purocean Yank Note 3.93.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00952 Published 2026-11-05 Fixed in 3.93.1 CWE-77

TI-2026-85275 CVE-2026-122154 · GHSA-gc7g-q4vc-cx9r

Information disclosure in purocean Yank Note Settings Endpoint

LOW 36

A vulnerability was found in purocean Yank Note 3.93.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00322 Published 2026-11-05 Fixed in 3.93.1 CWE-200

TI-2026-76439 CVE-2026-111915 · GHSA-46p6-h3r3-3fvj

Path traversal in Yank Note lets attackers read arbitrary files

LOW 36

Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00455 Published 2026-10-19 Fixed in 3.93.1 CWE-22

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0