ZDI-26-069 HIGH 7.8 Published Feb 06, 2026

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

Xmind

A remote code execution vulnerability in Xmind (CVE-2026-0777) with a high CVSS score of 7.8 allows attackers to execute arbitrary code if users are tricked into visiting a malicious website or opening a malicious file. This represents a significant threat since successful exploitation gives attackers full control over affected systems. Security teams should immediately patch Xmind installations, educate users about not opening untrusted files or visiting suspicious links, and monitor systems for any signs of compromise related to this vulnerability.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy