ZDI-26-069
HIGH 7.8
Published
Feb 06, 2026
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability
Xmind
A remote code execution vulnerability in Xmind (CVE-2026-0777) with a high CVSS score of 7.8 allows attackers to execute arbitrary code if users are tricked into visiting a malicious website or opening a malicious file. This represents a significant threat since successful exploitation gives attackers full control over affected systems. Security teams should immediately patch Xmind installations, educate users about not opening untrusted files or visiting suspicious links, and monitor systems for any signs of compromise related to this vulnerability.