Xmind Xmind
3 CVEs affecting Xmind Xmind. Latest disclosed: 2026-02-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-2680 | High | 8.1 | 2020-01-21 | The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack. |
CVE-2026-0777 | High | 7.8 | 2026-02-20 | Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2021-47844 | Medium | 6.1 | 2026-01-16 | Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attacker… |