{"id":"EUVD-2026-27051","enisaUuid":"4ed775a8-6a66-37e2-a5e6-81eb595f8dc5","description":"Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt(\"null\") placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password: \"null\" to the internal login endpoint receives a valid session for that user. The bypass is unauthenticated and requires no user interaction. This issue has been patched in version 0.19.3.","datePublished":"May 4, 2026, 5:42:32 PM","dateUpdated":"May 4, 2026, 8:20:53 PM","baseScore":9.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","references":"https://github.com/enchant97/note-mark/security/advisories/GHSA-pxf8-6wqm-r6hh\nhttps://github.com/enchant97/note-mark/releases/tag/v0.19.3\n","aliases":"CVE-2026-41571\nGHSA-pxf8-6wqm-r6hh\n","assigner":"GitHub_M","epss":0.37,"enisaIdProduct":[{"id":"38060121-0335-34aa-b8de-e14633748778","product":{"name":"note-mark","vendor":{"name":"enchant97"}},"product_version":"\u003d 0.19.2"}],"enisaIdVendor":[{"id":"cfe04e25-fe37-3553-9f29-b340ba7866c7","vendor":{"name":"enchant97"}}],"enisaIdVulnerability":[{"id":"a7eb1e47-1c05-340b-8055-4c0e6320608c","vulnerability":{"id":"CVE-2026-41571","description":"Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt(\"null\") placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password: \"null\" to the internal login endpoint receives a valid session for that user. The bypass is unauthenticated and requires no user interaction. This issue has been patched in version 0.19.3.","datePublished":"May 4, 2026, 5:42:32 PM","dateUpdated":"May 4, 2026, 8:20:53 PM","status":"PUBLISHED","baseScore":9.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","references":"https://github.com/enchant97/note-mark/security/advisories/GHSA-pxf8-6wqm-r6hh\nhttps://github.com/enchant97/note-mark/releases/tag/v0.19.3\n","enisa_id":"EUVD-2026-27051\n","assigner":"GitHub_M","epss":0.37,"dataProcessed":"Nov 5, 2026, 7:17:41 AM","vulnerabilityProduct":[{"id":"bbf55957-c0de-3688-bb21-cae55d5de738","product":{"name":"note-mark","vendor":{"name":"enchant97"}},"product_version":"\u003d 0.19.2"}],"vulnerabilityVendor":[{"id":"8dc9f6ac-5299-3949-b4c9-cbb8073f82d9","vendor":{"name":"enchant97"}}]}},{"id":"fce65e11-1870-3844-b058-029eaf304b63","vulnerability":{"id":"GHSA-pxf8-6wqm-r6hh","description":"Note Mark: OIDC-registered users authenticated by submitting password \"null\"","datePublished":"Apr 25, 2026, 11:40:19 PM","dateUpdated":"May 7, 2026, 8:20:12 PM","baseScore":0.0,"references":"https://github.com/enchant97/note-mark/security/advisories/GHSA-pxf8-6wqm-r6hh\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-41571\nhttps://github.com/enchant97/note-mark/commit/dea5530cc9891187b51548ef9f2868b7dc9f4e92\nhttps://github.com/enchant97/note-mark\nhttps://github.com/enchant97/note-mark/releases/tag/v0.19.3\n","enisa_id":"EUVD-2026-27051\n","aliases":"GHSA-pxf8-6wqm-r6hh\nCVE-2026-41571\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}