https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T05:22:34.086903+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109559 fkie_cve-2026-109559 2026-10-20T05:22:34.115328+00:00

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to obtain the edgeeverDesktop bridge including session token, sidecar RPC, and ACP channels.

 https://db.gcve.eu/vuln/ghsa-p9qx-79pg-cv5g GHSA-p9qx-79pg-cv5g 2026-10-20T05:22:34.115420+00:00

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to obtain the edgeeverDesktop bridge including session token, sidecar RPC, and ACP channels.