https://vulnerability.circl.lu/sightings/feed 2026-09-14T17:48:18.570102+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/efed15a3-725c-4ca9-8bc9-8ae137e62fee/export 2026-09-14T17:48:18.596688+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "efed15a3-725c-4ca9-8bc9-8ae137e62fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117108157232824630", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:38.232060Z"} 2026-08-17T01:04:38.232060+00:00 https://vulnerability.circl.lu/sighting/68518e25-b284-44ef-ad43-bc6c46403d6a/export 2026-09-14T17:48:18.599806+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "68518e25-b284-44ef-ad43-bc6c46403d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtaj2cal3p26", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:29.239884Z"} 2026-08-17T01:04:29.239884+00:00 https://vulnerability.circl.lu/sighting/e01992f1-2905-44dc-9ee1-3bce3934b023/export 2026-09-14T17:48:18.600028+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e01992f1-2905-44dc-9ee1-3bce3934b023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7kzigj3n2b", "content": "\ud83d\udea8 CVE-2026-73056 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T16:07:20.338290Z"} 2026-08-16T16:07:20.338290+00:00 https://vulnerability.circl.lu/sighting/93cc40eb-0a33-4e6c-8fcd-96aedad72cc6/export 2026-09-14T17:48:18.600149+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "93cc40eb-0a33-4e6c-8fcd-96aedad72cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt7degcjd22e", "content": "CVE-2026-73056 - siyuan\nOld versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-16T13:50:06.756596Z"} 2026-08-16T13:50:06.756596+00:00 https://vulnerability.circl.lu/sighting/f35d632c-ebe5-48ad-8552-eeaec6a88d2e/export 2026-09-14T17:48:18.600266+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f35d632c-ebe5-48ad-8552-eeaec6a88d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt7cbccnrj24", "content": "CRITICAL vuln in siyuan-note siyuan: CVE-2026-73056 lets remote attackers brute-force API tokens for admin access. Use strong tokens & update kernel ASAP. Details: https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d354...", "creation_timestamp": "2026-08-16T13:30:28.586185Z"} 2026-08-16T13:30:28.586185+00:00 https://vulnerability.circl.lu/sighting/e58c7d25-b3d2-4d0e-9da3-5675ae71da0b/export 2026-09-14T17:48:18.600388+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e58c7d25-b3d2-4d0e-9da3-5675ae71da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105428138280687", "content": "siyuan-note siyuan (kernel <3.7.4) hit by CRITICAL vuln: CVE-2026-73056 allows unlimited API token brute-forcing via CheckAuth(). Weak tokens = full admin takeover. Update & review tokens! \ud83d\udd11 https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d3540593a8ef28 #OffSeq #CVE202673056 #infosec", "creation_timestamp": "2026-08-16T13:30:26.700592Z"} 2026-08-16T13:30:26.700592+00:00 https://vulnerability.circl.lu/sighting/f1335c01-eeb5-4e2c-8826-3a074004c9e5/export 2026-09-14T17:48:18.600487+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f1335c01-eeb5-4e2c-8826-3a074004c9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73055", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt77z2t6wa2m", "content": "CVE-2026-73055\nShescape, a tool used on Unix systems, fails to properly protect user data. This means an attacker could potentially find out a user's home directory location. To fix this, update to version 2.1.15 or later.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-16T12:50:17.716534Z"} 2026-08-16T12:50:17.716534+00:00 https://vulnerability.circl.lu/sighting/5f0574b2-27d8-41fc-b809-23bf9edb092c/export 2026-09-14T17:48:18.600608+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5f0574b2-27d8-41fc-b809-23bf9edb092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6e3mlhur2n", "content": "SiYuan (<3.7.4) hit by CRITICAL XSS (CVE-2026-73052). Desktop clients with Node integration risk code execution. Upgrade to 3.7.4+ & review Node settings. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e8...", "creation_timestamp": "2026-08-16T04:30:25.867519Z"} 2026-08-16T04:30:25.867519+00:00 https://vulnerability.circl.lu/sighting/9ab7605b-8898-453e-93b8-273fdd5987ec/export 2026-09-14T17:48:18.600710+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9ab7605b-8898-453e-93b8-273fdd5987ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117103304584954863", "content": "CVE-2026-73052: CRITICAL XSS in SiYuan (<3.7.4) enables arbitrary JS & potential code execution if Node integration is enabled. Desktop users most at risk \u2014 upgrade ASAP & disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec", "creation_timestamp": "2026-08-16T04:30:23.963498Z"} 2026-08-16T04:30:23.963498+00:00 https://vulnerability.circl.lu/sighting/71e6bdbe-496c-4e33-8387-30c09d519fb5/export 2026-09-14T17:48:18.600813+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "71e6bdbe-496c-4e33-8387-30c09d519fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt672pkueq2f", "content": "SiYuan (pre-v3.7.4) hit by CRITICAL XSS (CVE-2026-73053). Crafted icons can execute code if Node integration is enabled. Patch status unclear \u2014 disable Node integration to reduce risk. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross...", "creation_timestamp": "2026-08-16T03:00:26.672103Z"} 2026-08-16T03:00:26.672103+00:00