CVE-2014-2680: Xmind

High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days.

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.

Affected products

• Xmind Xmind: up to and including 3.4.1

Published 2020-01-21. Last modified 2026-06-17.