Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6634 Improper Authorization in Usememos Memos Up to 0.22.1 via UpdateInstanceSetting https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6634
Post summary
The text is a brief disclosure of CVE-2026-6634, indicating an improper authorization flaw in Usememos Memos up to version 0.22.1, with a link to more details.
CVE-2026-6634 A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetti… https://www.cve.org/CVERecord?id=CVE-2026-6634
Post summary
The text announces the discovery of CVE‑2026‑6634, a weakness in usememos memos up to version 0.22.1 that affects a specific function and source file.