THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-47727 — Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant

[NVD] CVE-2026-47727 — Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant

mednvdPublished 2026-08-27

CVE-2026-47727 CVSS: None Published: 2026-08-27T20:17:44.780

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side template that leads to remote code executi

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-47727cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-47727