Advisories · Technology

tianma-if EdgeEver.

Every CVE that names tianma-if EdgeEver among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109559 CVE record

CVSS 8.4 High

EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-navigate
- tianma-if EdgeEver
- Broken access control
Not analysed yet 12 Oct 2026
CVE-2026-109558 CVE record

CVSS 8.5 High

EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview
- tianma-if EdgeEver
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-109557 CVE record

CVSS 8.4 High

EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview
- tianma-if EdgeEver
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-109556 CVE record

CVSS 7.3 High

EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC
- tianma-if EdgeEver
- CWE-749
Not analysed yet 12 Oct 2026
CVE-2026-108727 CVE record

CVSS 5.3 Medium

EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes
- tianma-if EdgeEver
- Broken access control
Not analysed yet 11 Oct 2026