CVE-2026-17497

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

July 27, 2026

Last Seen

July 27, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Remote Code Execution Vulnerability in NoteGen (CVE-2026-17497)70.5

CVE-2026-17497 is a high-severity remote code execution vulnerability affecting NoteGen versions prior to 0.32.0. The flaw arises from an overly permissive Tauri shell plugin configuration that allows JavaScript in the application's webview to execute arbitrary OS commands. This can lead to full rem...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Remote Code Execution Vulnerability in NoteGen (CVE-2026-17497)

Jul 27·2 sources

Related Articles (3)

NVD nvd.nist.gov/vuln/detail/CVE-2026-17497

nvd.nist.gov·Jul 27

cvefeed high severity News Jul 26, 2026 CVE-2026-17497 - NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python A remote code execution vulnerability in NoteGen before version 0.32.0 caused by overly permissive Tauri shell plugin execute capabilities, allowing webview JavaScript to run attacker-controlled OS commands. Read more

cvefeed.io·Jul 27

Remote Code Execution in NoteGen Tauri Shell Plugin Configuration (CVE-2026-17497)

Mallory.Ai·Jul 27

Related Entities

Malware Remote Code Execution Zero-day Exploit CWE-78 - OS Command Injection CWE-276 - Incorrect Default Permissions Cwe-79 - Cross-site Scripting (xss)T1059.004 - Unix Shell T1059.006 - Python T1059.007 - JavaScript T1059 - Command and Scripting Interpreter XSS