CVE-2026-109556 in EdgeEver
Riassunto
di MITRE • 13/10/2026
EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview stored cross-site scripting, can call probeAcpAdapter to launch local executables with the user's privileges.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.