low · CVSS v3 2.6 · CVSS v4 2.1

CVE-2026-111935

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attack…

Description

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.

Scores

Severity
low
CVSS v2
2.1
CVSS v3
2.6
CVSS v4
2.1
EPSS
—

← All CVEs

Related CVEs

low

CVE-2026-112288

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.

View analysis

low

CVE-2026-112157

A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.ts of the component Memory Service. This manipulation causes resource consumption. Remote exploitation of the attack is possible. The attack is considered to have high complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The exploit is partially overstated. While "POST /api/v1/admin/shutdown" accepts unauthenticated requests when no token is configured, it’s designed for local use and later received cross-origin fixes. Unauthenticated endpoint exposure is confirmed; browser-triggered DoS remains likely but depends on specific browser behavior.

View analysis

low

CVE-2026-98700

CVE-2026-98700 affects the Linux kernel’s mac80211 subsystem, causing incorrect band selection for 802.3 encapsulated offload frames. The bug can lead to suboptimal transmission rates on non‑MLD interfaces. It has been fixed by ensuring the band is set correctly or the frame is dropped when no channel context is available.

View analysis

low

CVE-2026-98761

CVE-2026-98761 is a low‑severity bug in the Linux kernel’s USB Type‑C role‑swap logic that can leave VBUS powered after a failed FAST_ROLE_SWAP AMS. The flaw occurs when a cable incorrectly signals a role swap during disconnection, causing the port to stay in an error state. It was fixed by adding error‑recovery and port‑reset steps.

View analysis