https://vulnerability.circl.lu/sightings/feed 2026-09-14T17:31:05.281817+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/52f3fb2d-f542-4684-b500-cd9118558dc2/export 2026-09-14T17:31:05.310009+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "52f3fb2d-f542-4684-b500-cd9118558dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72815", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101882", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72815-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 01:54:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.224189Z"} 2026-09-11T00:00:53.224189+00:00 https://vulnerability.circl.lu/sighting/fd19047a-8614-48c9-85f9-b20e17f07450/export 2026-09-14T17:31:05.312966+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fd19047a-8614-48c9-85f9-b20e17f07450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72815", "type": "published-proof-of-concept", "source": "Telegram/gOw7ciMZOTUWYNYtqA2ln1nEEiajeumMwU7KLhL3ORvBRlQ", "content": "", "creation_timestamp": "2026-09-11T00:00:52.173101Z"} 2026-09-11T00:00:52.173101+00:00 https://vulnerability.circl.lu/sighting/c0a5ed2c-1d3b-482c-9516-32e441dd10a1/export 2026-09-14T17:31:05.313108+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c0a5ed2c-1d3b-482c-9516-32e441dd10a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72815", "type": "published-proof-of-concept", "source": "Telegram/gOw7ciMZOTUWYNYtqA2ln1nEEiajeumMwU7KLhL3ORvBRlQ", "content": "", "creation_timestamp": "2026-09-10T05:00:05.275619Z"} 2026-09-10T05:00:05.275619+00:00 https://vulnerability.circl.lu/sighting/df7d8329-f4e2-47dd-82a9-cc8966fdaf37/export 2026-09-14T17:31:05.313215+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "df7d8329-f4e2-47dd-82a9-cc8966fdaf37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72815", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101882", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72815-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 01:54:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T04:00:05.179424Z"} 2026-09-10T04:00:05.179424+00:00 https://vulnerability.circl.lu/sighting/6534cb23-8846-41be-981c-f85d6092f1ce/export 2026-09-14T17:31:05.313330+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6534cb23-8846-41be-981c-f85d6092f1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72812", "type": "seen", "source": "https://gist.github.com/alon710/0ef37619359f1c245a80d0fc123877cc", "content": "# CVE-2026-72812: CVE-2026-72812: Broken Access Control and SQL Injection in SiYuan\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72812\n\n## Summary\nA critical authorization bypass vulnerability exists in SiYuan personal knowledge management system before v3.7.4. The /api/ref/refreshBacklink endpoint lacks administrative role verification, enabling unauthenticated users to initiate database transactions and disk operations. When combined with an unsafe SQL generation pattern in nested backlink queries, an attacker can exploit a secondary SQL injection vulnerability to compromise local databases or cause denial-of-service conditions.\n\n## TL;DR\nUnauthenticated attackers can abuse /api/ref/refreshBacklink in public mode to bypass authorization filters, trigger heavy CPU/disk usage, and exploit a secondary SQL injection flaw in the recursive query engine.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.5\n- **EPSS Score**: 0.00275\n- **Impact**: Bypass Write Protections, Secondary SQL Injection, Denial of Service\n- **Exploit Status**: PoC (Proof of Concept) available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- SiYuan personal knowledge management system running versions prior to v3.7.4\n- **SiYuan**: < v3.7.4 (Fixed in: `v3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan application to version v3.7.4 or later.\n- Bind the default API port (6806) to localhost (127.0.0.1) instead of public interfaces.\n- Use reverse proxies to filter incoming traffic and block unauthorized access to the /api/* paths.\n\n**Remediation Steps:**\n1. Identify the running version of the SiYuan deployment.\n2. Apply the vendor patch by pulling the latest official Docker image or updating the local executable to v3.7.4.\n3. Verify the routing logic by issuing an unauthenticated POST request to /api/ref/refreshBacklink; the system must return an authorization error.\n\n## References\n\n- [GitHub Security Advisory GHSA-wgwx-479j-23vq](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-wgwx-479j-23vq)\n- [Vendor Patch Commit 7d273c2](https://github.com/siyuan-note/siyuan/commit/7d273c271ce193b9d3ee5751b596b8093ba84ada)\n- [VulnCheck Technical Advisory](https://www.vulncheck.com/advisories/siyuan-before-missing-authorization-via-refreshbacklink)\n- [CVE-2026-72812 Record](https://www.cve.org/CVERecord?id=CVE-2026-72812)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72812) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T12:31:49.537816Z"} 2026-09-04T12:31:49.537816+00:00 https://vulnerability.circl.lu/sighting/32890e89-521f-45b2-a521-ad2586427de1/export 2026-09-14T17:31:05.313468+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "32890e89-521f-45b2-a521-ad2586427de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72811", "type": "seen", "source": "https://gist.github.com/alon710/5faf93883253b8cbdcfb378cbb150745", "content": "# CVE-2026-72811: CVE-2026-72811: Remote SQL Injection in SiYuan Backlink and Mention Search Engine\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72811\n\n## Summary\nA critical SQL Injection vulnerability exists in the SiYuan note-taking application (versions <= v3.7.2) due to improper neutralization of single quotes within the backlink and mention search queries. Because the application constructs SQLite Full Text Search (FTS) queries via direct string concatenation and uses a database driver that supports stacked query statements, remote unauthenticated attackers can execute arbitrary SQL commands on the master database, compromising all hosted notebooks. This issue has been fully remediated in version v3.7.4.\n\n## TL;DR\nUnauthenticated remote SQL injection via unescaped string concatenation in SiYuan's SQLite FTS backlink query engine, remediated in v3.7.4.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command)\n- **Attack Vector**: Network (Unauthenticated, Remote)\n- **CVSS v3.1 Score**: 10.0 (Critical)\n- **EPSS Score**: 0.0025 (Percentile: 16.27%)\n- **Impact**: Arbitrary Database Read/Write and System Configuration Alteration\n- **Exploit Status**: Proof-of-Concept (PoC) documented in research\n- **KEV Status**: Not Listed in CISA Known Exploited Vulnerabilities\n\n## Affected Systems\n\n- SiYuan Note-Taking Application\n- **SiYuan**: <= v3.7.2 (Fixed in: `v3.7.4`)\n\n## Mitigation\n\n- Transition all dynamic string-concatenated SQLite queries to safe parameterized SQL queries using placeholders.\n- Implement strong input validation and strictly escape all single-quote characters targeting database search functions.\n- Disable SiYuan Publish Mode on untrusted public networks when immediate upgrades are not possible.\n- Enforce network-level restrictions using firewalls, reverse proxies, and VPNs to restrict backend search access to authorized clients.\n\n**Remediation Steps:**\n1. Identify active installations running SiYuan version 3.7.2 or lower.\n2. Download and install SiYuan version 3.7.4 or newer from the official release repository.\n3. Verify the application has successfully updated by querying the current version in the settings dashboard.\n4. Verify that custom parameterized queries are active by auditing backlink search patterns in database access logs.\n\n## References\n\n- [GitHub Security Advisory GHSA-q2vg-7qgx-x5fc](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-q2vg-7qgx-x5fc)\n- [SiYuan Parameterization Commit](https://github.com/siyuan-note/siyuan/commit/1a5b3431d5ab3036b19c1cc79486fedd6906fb57)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/siyuan-before-sql-injection-via-backlink-search)\n- [NVD Entry for CVE-2026-72811](https://nvd.nist.gov/vuln/detail/CVE-2026-72811)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-72811)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72811) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T11:32:02.056384Z"} 2026-09-04T11:32:02.056384+00:00 https://vulnerability.circl.lu/sighting/c77ee005-edaf-4fdc-b600-810c54a854a0/export 2026-09-14T17:31:05.313609+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c77ee005-edaf-4fdc-b600-810c54a854a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72810", "type": "seen", "source": "https://gist.github.com/alon710/a4cc1353ab9f041fddf6785afea35431", "content": "# CVE-2026-72810: CVE-2026-72810: Publish-Boundary Bypass and Real-Time Data Leakage via WebSocket Session Pollution in SiYuan\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72810\n\n## Summary\nCVE-2026-72810 is a critical publish-boundary bypass vulnerability in the SiYuan personal knowledge management system before version 3.7.4. The flaw lies in the backend real-time WebSocket broadcast mechanism. When configured in public publish mode, the system fails to differentiate between unauthenticated public reader sessions and authorized administrative sessions within its global connection pool. This architectural oversight allows unauthenticated remote attackers connecting to the public WebSocket endpoint on port 6808 to passively receive real-time, raw workspace modification events, including keystroke logs, block updates, and content from protected or forbidden documents.\n\n## TL;DR\nA session-pollution flaw in SiYuan's WebSocket implementation allows anonymous network users to passively intercept all real-time workspace edits, bypassing publication boundaries.\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.6 (High)\n- **CVSS v4.0 Score**: 9.2 (Critical)\n- **EPSS Score**: 0.00313 (0.313%)\n- **Exploit Status**: none\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan personal knowledge management system\n- **SiYuan**: < 3.7.4 (Fixed in: `3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan to version 3.7.4 or later.\n- Restrict public network exposure to the WebSocket port (6808).\n- Configure reverse proxy rules to block unauthorized /ws handshakes.\n\n**Remediation Steps:**\n1. Verify the current running version of the SiYuan application.\n2. Pull and deploy the SiYuan container image or application binary for version 3.7.4 or later.\n3. Ensure firewall rules or security groups restrict access to administrative ports on public interfaces.\n4. Conduct a review of reverse-proxy rules to ensure WebSocket path /ws is protected.\n\n## References\n\n- [GitHub Security Advisory GHSA-mw8r-mw84-88v2](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mw8r-mw84-88v2)\n- [Third-Party Security Advisory (VulnCheck)](https://www.vulncheck.com/advisories/siyuan-before-publish-boundary-bypass-via-websocket)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72810) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T10:31:45.326661Z"} 2026-09-04T10:31:45.326661+00:00 https://vulnerability.circl.lu/sighting/2dbf36b4-f768-4d12-bbc2-99b34d84728c/export 2026-09-14T17:31:05.313732+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "2dbf36b4-f768-4d12-bbc2-99b34d84728c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72812", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wgwx-479j-23vq", "content": "", "creation_timestamp": "2026-09-04T00:35:37.347892Z"} 2026-09-04T00:35:37.347892+00:00 https://vulnerability.circl.lu/sighting/71f42186-d8ca-47b8-a0e8-e43c840fbbf9/export 2026-09-14T17:31:05.315232+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "71f42186-d8ca-47b8-a0e8-e43c840fbbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72811", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-q2vg-7qgx-x5fc", "content": "", "creation_timestamp": "2026-09-04T00:35:35.131941Z"} 2026-09-04T00:35:35.131941+00:00 https://vulnerability.circl.lu/sighting/52a17d49-cd29-42e5-b61b-0f0dd81ca202/export 2026-09-14T17:31:05.315371+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "52a17d49-cd29-42e5-b61b-0f0dd81ca202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72810", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-mw8r-mw84-88v2", "content": "", "creation_timestamp": "2026-09-04T00:35:32.152699Z"} 2026-09-04T00:35:32.152699+00:00