TI-2026-00560 CVE-2026-0777 · GHSA-xwhr-hxqf-pv44
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability
Priority LOW 36
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability.
3 records
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability.
Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers.
The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.