Vulnerabilities

TI-2026-73521 CVE-2026-86022

VNote argument injection enables command execution via note filenames

HIGH 66

VNote is a note-taking platform.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.0021 Published 2026-10-13 Fixed in 4.3.0 CWE-78

TI-2026-73520 CVE-2026-86016

HIGH 69

VNote is a note-taking platform.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00278 Published 2026-10-13 Fixed in 4.3.0 CWE-79

TI-2026-13044 CVE-2026-15505 · GHSA-q2vg-w96j-jgp7

LOW 23

A weakness has been identified in vnotex vnote up to 3.20.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2026-07-12 No fix listed CWE-79

TI-2024-26798 CVE-2024-39904

MEDIUM 41

VNote is a note-taking platform.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00657 Published 2024-07-11 Fixed in 3.18.1 CWE-73