https://vulnerability.circl.lu/sightings/feed 2026-08-19T17:45:23.818666+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/efed15a3-725c-4ca9-8bc9-8ae137e62fee/export 2026-08-19T17:45:23.839017+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "efed15a3-725c-4ca9-8bc9-8ae137e62fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117108157232824630", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:38.232060Z"} 2026-08-17T01:04:38.232060+00:00 https://vulnerability.circl.lu/sighting/68518e25-b284-44ef-ad43-bc6c46403d6a/export 2026-08-19T17:45:23.840906+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "68518e25-b284-44ef-ad43-bc6c46403d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtaj2cal3p26", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:29.239884Z"} 2026-08-17T01:04:29.239884+00:00 https://vulnerability.circl.lu/sighting/e01992f1-2905-44dc-9ee1-3bce3934b023/export 2026-08-19T17:45:23.841036+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e01992f1-2905-44dc-9ee1-3bce3934b023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7kzigj3n2b", "content": "\ud83d\udea8 CVE-2026-73056 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T16:07:20.338290Z"} 2026-08-16T16:07:20.338290+00:00 https://vulnerability.circl.lu/sighting/93cc40eb-0a33-4e6c-8fcd-96aedad72cc6/export 2026-08-19T17:45:23.841141+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "93cc40eb-0a33-4e6c-8fcd-96aedad72cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt7degcjd22e", "content": "CVE-2026-73056 - siyuan\nOld versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-16T13:50:06.756596Z"} 2026-08-16T13:50:06.756596+00:00 https://vulnerability.circl.lu/sighting/f35d632c-ebe5-48ad-8552-eeaec6a88d2e/export 2026-08-19T17:45:23.841240+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f35d632c-ebe5-48ad-8552-eeaec6a88d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt7cbccnrj24", "content": "CRITICAL vuln in siyuan-note siyuan: CVE-2026-73056 lets remote attackers brute-force API tokens for admin access. Use strong tokens & update kernel ASAP. Details: https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d354...", "creation_timestamp": "2026-08-16T13:30:28.586185Z"} 2026-08-16T13:30:28.586185+00:00 https://vulnerability.circl.lu/sighting/e58c7d25-b3d2-4d0e-9da3-5675ae71da0b/export 2026-08-19T17:45:23.841338+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e58c7d25-b3d2-4d0e-9da3-5675ae71da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105428138280687", "content": "siyuan-note siyuan (kernel <3.7.4) hit by CRITICAL vuln: CVE-2026-73056 allows unlimited API token brute-forcing via CheckAuth(). Weak tokens = full admin takeover. Update & review tokens! \ud83d\udd11 https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d3540593a8ef28 #OffSeq #CVE202673056 #infosec", "creation_timestamp": "2026-08-16T13:30:26.700592Z"} 2026-08-16T13:30:26.700592+00:00