Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-28201

Summary
Assigner-ENISA
Assigner Org ID-a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
Published At-07 May, 2026 | 10:12
Updated At-07 May, 2026 | 11:37
Rejected At-
Credits

SurrealDB Injection on Open Notebook

An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or delete arbitrary database entries via specially crafted malicious URL. Depending on the deployment, data exfiltration is also possible.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
ā–¼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:ENISA
Assigner Org ID:a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
Published At:07 May, 2026 | 10:12
Updated At:07 May, 2026 | 11:37
Rejected At:
ā–¼CVE Numbering Authority (CNA)
SurrealDB Injection on Open Notebook

An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or delete arbitrary database entries via specially crafted malicious URL. Depending on the deployment, data exfiltration is also possible.

Affected Products
Vendor
Open Notebook
Product
Open Notebook
Default Status
unaffected
Versions
Affected
  • From 0 through 1.8.2 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-20CWE-20 Improper input validation
CWECWE-917CWE-917 Improper neutralization of special elements used in an expression language statement ('expression language injection')
CWECWE-352CWE-352 Cross-Site request forgery (CSRF)
Type: CWE
CWE ID: CWE-20
Description: CWE-20 Improper input validation
Type: CWE
CWE ID: CWE-917
Description: CWE-917 Improper neutralization of special elements used in an expression language statement ('expression language injection')
Type: CWE
CWE ID: CWE-352
Description: CWE-352 Cross-Site request forgery (CSRF)
Metrics
VersionBase scoreBase severityVector
4.08.7HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Version: 4.0
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-545CAPEC-545 Pull Data from System Resources
CAPEC ID: CAPEC-545
Description: CAPEC-545 Pull Data from System Resources
Solutions

Configurations

Workarounds

Exploits

Credits

finder
CERT-EU
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://github.com/lfnovo/open-notebook/security/advisories/GHSA-5wj9-f8q5-8f9c
vendor-advisory
Hyperlink: https://github.com/lfnovo/open-notebook/security/advisories/GHSA-5wj9-f8q5-8f9c
Resource:
vendor-advisory
ā–¼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
ā–¼National Vulnerability Database (NVD)
nvd.nist.gov
Source:a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
Published At:07 May, 2026 | 11:16
Updated At:07 May, 2026 | 11:16

An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or delete arbitrary database entries via specially crafted malicious URL. Depending on the deployment, data exfiltration is also possible.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.08.7HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Secondary
Version: 4.0
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-20Secondarya6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CWE-352Secondarya6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CWE-917Secondarya6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CWE ID: CWE-20
Type: Secondary
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CWE ID: CWE-352
Type: Secondary
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CWE ID: CWE-917
Type: Secondary
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/lfnovo/open-notebook/security/advisories/GHSA-5wj9-f8q5-8f9ca6d3dc9e-0591-4a13-bce7-0f5b31ff6158
N/A
Hyperlink: https://github.com/lfnovo/open-notebook/security/advisories/GHSA-5wj9-f8q5-8f9c
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

5Records found

CVE-2026-33587
Matching Score-6
Assigner-EU Agency for Cybersecurity (ENISA)
ShareView Details
Matching Score-6
Assigner-EU Agency for Cybersecurity (ENISA)
CVSS Score-9.2||CRITICAL
EPSS-0.06% / 19.55%
||
7 Day CHG~0.00%
Published-07 May, 2026 | 10:22
Updated-07 May, 2026 | 20:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Remote Code Execution (RCE) via Server-Side Template Injection (SSTI)

Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations.

Action-Not Available
Vendor-lfnovoOpen Notebook
Product-open-notebookOpen Notebook
CWE ID-CWE-20
Improper Input Validation
CVE-2026-33589
Matching Score-6
Assigner-EU Agency for Cybersecurity (ENISA)
ShareView Details
Matching Score-6
Assigner-EU Agency for Cybersecurity (ENISA)
CVSS Score-8.2||HIGH
EPSS-0.05% / 16.16%
||
7 Day CHG~0.00%
Published-07 May, 2026 | 10:31
Updated-07 May, 2026 | 11:34
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Arbitrary File Read via Local File Inclusion (LFI)

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker container via path traversal.

Action-Not Available
Vendor-Open Notebook
Product-Open Notebook
CWE ID-CWE-20
Improper Input Validation
CVE-2026-33588
Matching Score-6
Assigner-EU Agency for Cybersecurity (ENISA)
ShareView Details
Matching Score-6
Assigner-EU Agency for Cybersecurity (ENISA)
CVSS Score-7||HIGH
EPSS-0.06% / 19.20%
||
7 Day CHG~0.00%
Published-07 May, 2026 | 10:28
Updated-07 May, 2026 | 20:00
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Arbitrary File Write Through Path Traversal

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.

Action-Not Available
Vendor-lfnovoOpen Notebook
Product-open-notebookOpen Notebook
CWE ID-CWE-20
Improper Input Validation
CVE-2024-6662
Matching Score-4
Assigner-CERT.PL
ShareView Details
Matching Score-4
Assigner-CERT.PL
CVSS Score-8.7||HIGH
EPSS-0.12% / 31.03%
||
7 Day CHG~0.00%
Published-10 Jan, 2025 | 17:50
Updated-15 Apr, 2026 | 00:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
CSRF in MegaBIP

Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available underĀ "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user could be tricked into visiting a malicious website, which would send POST request to this endpoint. If the victim is a logged in administrator, this could lead to creation of new accounts and granting of administrative permissions.

Action-Not Available
Vendor-Jan Syski
Product-MegaBIP
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2025-53540
Matching Score-4
Assigner-GitHub, Inc.
ShareView Details
Matching Score-4
Assigner-GitHub, Inc.
CVSS Score-8.7||HIGH
EPSS-0.77% / 73.61%
||
7 Day CHG+0.43%
Published-07 Jul, 2025 | 19:26
Updated-08 Jul, 2025 | 16:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Several OTA update examples and the HTTPUpdateServer implementation are vulnerable to Cross-Site Request Forgery (CSRF). The update endpoints accept POST requests for firmware uploads without CSRF protection. This allows an attacker to upload and execute arbitrary firmware, resulting in remote code execution (RCE). This vulnerability is fixed in 3.2.1.

Action-Not Available
Vendor-espressif
Product-arduino-esp32
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
Details not found