T
Trilium
Security Risk Profile
72
/100
highSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 19, 2026 to present
5
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
8.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
72/100
high
🆕 3Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
2High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Code Injection
3
2
XSS
2
3
CSRF
1
4
Path Traversal
1
Most Affected Products
1. Trilium Trilium4
2. Trilium Trilium Notes (Desktop)1
3. Trilium Trilium Notes1
Recent Vulnerabilities
See more →CVE-2026-53578
CVSS 9.3critical
Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
Aug 27, 2026🔧 No Patch
CVE-2026-48996
CVSS 9.3critical
Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
Aug 27, 2026🔧 No Patch
CVE-2026-47727
CVSS 8.6high
Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)
Aug 27, 2026🔧 No Patch
CVE-2026-39310
CVSS 8.6high
Trilium Notes: Authentication Bypass in Clipper API for Electron (Desktop) Builds
May 20, 2026🔧 No Patch
CVE-2026-35593
CVSS 6.8medium
Trilium Notes has Local File Inclusion via upload modified file API endpoint
May 19, 2026🔧 No Patch
Monitor Trilium in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.