{"id":"EM-20261105-X9Y0","url":"https://cyber.eventmonitor.net/incident/EM-20261105-X9Y0/noname-vulnerability-cve-2026-123208/","type":"cve","title":"noname Vulnerability (CVE-2026-123208)","subtitle":"CVE-2026-123208","subject":"CVE-2026-123208","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-05T19:17:20.380Z","firstSignal":"2026-11-05T18:16:42.000Z","lastSignal":"2026-11-05T19:17:20.380Z","updated":"2026-11-06T12:16:45.734Z","revision":1,"life":[{"status":"Born","at":"2026-11-05T19:17:20.380Z","why":"second independent source: C6 NVD CVE API 2.0"},{"status":"Developing","at":"2026-11-05T19:17:20.380Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-05T18:16:42.000Z","what":"First signal: C41 Red Hat Security Data"},{"at":"2026-11-05T19:17:20.380Z","what":"Born: second source, C6 NVD CVE API 2.0. Page EM-20261105-X9Y0 created."}],"stages":[{"name":"Disclosed","at":"2026-11-05T19:17:20.380Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-05T19:17:20.380Z","detail":"CVSS 7.7"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":"2026-11-05T18:16:42.000Z","detail":"C41 published"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-05T18:16:42.000Z","source":"C41","sourceName":"Red Hat Security Data","role":"Vendor","severity":3,"title":"Red Hat: CVE-2026-123208 (important)","text":"noname: noname: Arbitrary code execution via unauthenticated local file server","url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-123208.json"},{"at":"2026-11-05T19:17:20.380Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-123208 (CVSS 7.7)","text":"noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that allows malicious websites to read, overwrite, or delete installation files. Attackers can send cross-origin requests to /writeFile on localhost port 8089 to overwrite renderer scripts, executing JavaScript with Node.js access as the local user.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123208"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-05T19:17:20.380","score":7.7,"severity":"HIGH","desc":"noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that allows malicious websites to read, overwrite, or delete installation files. Attackers can send cross-origin requests to /writeFile on localhost port 8089 to overwrite…","product":"","seen":1793917591435},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}