giuspen cherrytree

• CVE-2026-118693 Medium 4.7 CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path 0.1%
• CVE-2026-118692 High 7.0 CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action 0.6%