Tianma-if vulnerabilities
We track 4 vulnerabilities in Tianma-if products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
Latest Tianma-if vulnerabilities
- 8.7 High severity
EdgeEver: Incorrect Authorization
EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for examp
- 8.7 High severity
EdgeEver: Improper Neutralization of Input During Web Page Generation
EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event h
- 8.7 High severity
EdgeEver: Improper Neutralization of Input During Web Page Generation
EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP create_notebook, rename_notebook or crea
- 8.0 High severity
EdgeEver: Exposed Dangerous Method or Function
EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as v