CVE-2026-123208

The noname Electron desktop build (versions v1.11.2 through v1.11.6.1 ) is vulnerable to a Missing Authentication flaw in its local file server. The server utilizes wildcard CORS , enabling malicious websites to perform cross-origin requests to the /writeFile endpoint on localhost port 8089 . Thi...

CVE-2024-13975 Commvault 11.20.0 - 11.36.0 Windows Access Nodes Compromise via Local File Server Agent Abuse

A local privilege escalation vulnerability exists in Commvault for Windows versions 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. In affected configurations, a local attacker who owns a client system with the file server agent installed can compromise any assigned Windows access nodes. This ma...