CVE-2026-122157 in Yank Noteinfo

Prediction

by VulDB Data Team • 11/04/2026

A vulnerability was identified in <a href="/product/purocean:yank_note">Purocean Yank Note 3.93.0</a>. Affected by this vulnerability is the function <code>checkPermission</code> of the file <em>src/main/server/index.ts</em> of the component <em>Terminal Handler</em>. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version 3.93.1 addresses this issue. The name of the patch is <em>59f85d48f17a70a402ad59dcecacdbec20f954df</em>. Upgrading the affected component is recommended.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

VulDB

Moderation

accepted

CPE

VulDB

Exploit

Download

EPSS

0.00000

KEV

no

Activities

very low

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!