https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 17:48:19 +0000 https://vulnerability.circl.lu/sighting/efed15a3-725c-4ca9-8bc9-8ae137e62fee/export {"uuid": "efed15a3-725c-4ca9-8bc9-8ae137e62fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117108157232824630", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:38.232060Z"} {"uuid": "efed15a3-725c-4ca9-8bc9-8ae137e62fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117108157232824630", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:38.232060Z"} https://vulnerability.circl.lu/sighting/efed15a3-725c-4ca9-8bc9-8ae137e62fee/export Mon, 17 Aug 2026 01:04:38 +0000 https://vulnerability.circl.lu/sighting/68518e25-b284-44ef-ad43-bc6c46403d6a/export {"uuid": "68518e25-b284-44ef-ad43-bc6c46403d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtaj2cal3p26", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:29.239884Z"} {"uuid": "68518e25-b284-44ef-ad43-bc6c46403d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtaj2cal3p26", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel <3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:29.239884Z"} https://vulnerability.circl.lu/sighting/68518e25-b284-44ef-ad43-bc6c46403d6a/export Mon, 17 Aug 2026 01:04:29 +0000 https://vulnerability.circl.lu/sighting/e01992f1-2905-44dc-9ee1-3bce3934b023/export {"uuid": "e01992f1-2905-44dc-9ee1-3bce3934b023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7kzigj3n2b", "content": "\ud83d\udea8 CVE-2026-73056 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T16:07:20.338290Z"} {"uuid": "e01992f1-2905-44dc-9ee1-3bce3934b023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7kzigj3n2b", "content": "\ud83d\udea8 CVE-2026-73056 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T16:07:20.338290Z"} https://vulnerability.circl.lu/sighting/e01992f1-2905-44dc-9ee1-3bce3934b023/export Sun, 16 Aug 2026 16:07:20 +0000 https://vulnerability.circl.lu/sighting/93cc40eb-0a33-4e6c-8fcd-96aedad72cc6/export {"uuid": "93cc40eb-0a33-4e6c-8fcd-96aedad72cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt7degcjd22e", "content": "CVE-2026-73056 - siyuan\nOld versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-16T13:50:06.756596Z"} {"uuid": "93cc40eb-0a33-4e6c-8fcd-96aedad72cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt7degcjd22e", "content": "CVE-2026-73056 - siyuan\nOld versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-16T13:50:06.756596Z"} https://vulnerability.circl.lu/sighting/93cc40eb-0a33-4e6c-8fcd-96aedad72cc6/export Sun, 16 Aug 2026 13:50:06 +0000 https://vulnerability.circl.lu/sighting/f35d632c-ebe5-48ad-8552-eeaec6a88d2e/export {"uuid": "f35d632c-ebe5-48ad-8552-eeaec6a88d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt7cbccnrj24", "content": "CRITICAL vuln in siyuan-note siyuan: CVE-2026-73056 lets remote attackers brute-force API tokens for admin access. Use strong tokens & update kernel ASAP. Details: https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d354...", "creation_timestamp": "2026-08-16T13:30:28.586185Z"} {"uuid": "f35d632c-ebe5-48ad-8552-eeaec6a88d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt7cbccnrj24", "content": "CRITICAL vuln in siyuan-note siyuan: CVE-2026-73056 lets remote attackers brute-force API tokens for admin access. Use strong tokens & update kernel ASAP. Details: https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d354...", "creation_timestamp": "2026-08-16T13:30:28.586185Z"} https://vulnerability.circl.lu/sighting/f35d632c-ebe5-48ad-8552-eeaec6a88d2e/export Sun, 16 Aug 2026 13:30:28 +0000 https://vulnerability.circl.lu/sighting/e58c7d25-b3d2-4d0e-9da3-5675ae71da0b/export {"uuid": "e58c7d25-b3d2-4d0e-9da3-5675ae71da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105428138280687", "content": "siyuan-note siyuan (kernel <3.7.4) hit by CRITICAL vuln: CVE-2026-73056 allows unlimited API token brute-forcing via CheckAuth(). Weak tokens = full admin takeover. Update & review tokens! \ud83d\udd11 https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d3540593a8ef28 #OffSeq #CVE202673056 #infosec", "creation_timestamp": "2026-08-16T13:30:26.700592Z"} {"uuid": "e58c7d25-b3d2-4d0e-9da3-5675ae71da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105428138280687", "content": "siyuan-note siyuan (kernel <3.7.4) hit by CRITICAL vuln: CVE-2026-73056 allows unlimited API token brute-forcing via CheckAuth(). Weak tokens = full admin takeover. Update & review tokens! \ud83d\udd11 https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d3540593a8ef28 #OffSeq #CVE202673056 #infosec", "creation_timestamp": "2026-08-16T13:30:26.700592Z"} https://vulnerability.circl.lu/sighting/e58c7d25-b3d2-4d0e-9da3-5675ae71da0b/export Sun, 16 Aug 2026 13:30:26 +0000 https://vulnerability.circl.lu/sighting/f1335c01-eeb5-4e2c-8826-3a074004c9e5/export {"uuid": "f1335c01-eeb5-4e2c-8826-3a074004c9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73055", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt77z2t6wa2m", "content": "CVE-2026-73055\nShescape, a tool used on Unix systems, fails to properly protect user data. This means an attacker could potentially find out a user's home directory location. To fix this, update to version 2.1.15 or later.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-16T12:50:17.716534Z"} {"uuid": "f1335c01-eeb5-4e2c-8826-3a074004c9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73055", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt77z2t6wa2m", "content": "CVE-2026-73055\nShescape, a tool used on Unix systems, fails to properly protect user data. This means an attacker could potentially find out a user's home directory location. To fix this, update to version 2.1.15 or later.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-16T12:50:17.716534Z"} https://vulnerability.circl.lu/sighting/f1335c01-eeb5-4e2c-8826-3a074004c9e5/export Sun, 16 Aug 2026 12:50:17 +0000 https://vulnerability.circl.lu/sighting/5f0574b2-27d8-41fc-b809-23bf9edb092c/export {"uuid": "5f0574b2-27d8-41fc-b809-23bf9edb092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6e3mlhur2n", "content": "SiYuan (<3.7.4) hit by CRITICAL XSS (CVE-2026-73052). Desktop clients with Node integration risk code execution. Upgrade to 3.7.4+ & review Node settings. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e8...", "creation_timestamp": "2026-08-16T04:30:25.867519Z"} {"uuid": "5f0574b2-27d8-41fc-b809-23bf9edb092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6e3mlhur2n", "content": "SiYuan (<3.7.4) hit by CRITICAL XSS (CVE-2026-73052). Desktop clients with Node integration risk code execution. Upgrade to 3.7.4+ & review Node settings. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e8...", "creation_timestamp": "2026-08-16T04:30:25.867519Z"} https://vulnerability.circl.lu/sighting/5f0574b2-27d8-41fc-b809-23bf9edb092c/export Sun, 16 Aug 2026 04:30:25 +0000 https://vulnerability.circl.lu/sighting/9ab7605b-8898-453e-93b8-273fdd5987ec/export {"uuid": "9ab7605b-8898-453e-93b8-273fdd5987ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117103304584954863", "content": "CVE-2026-73052: CRITICAL XSS in SiYuan (<3.7.4) enables arbitrary JS & potential code execution if Node integration is enabled. Desktop users most at risk \u2014 upgrade ASAP & disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec", "creation_timestamp": "2026-08-16T04:30:23.963498Z"} {"uuid": "9ab7605b-8898-453e-93b8-273fdd5987ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73052", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117103304584954863", "content": "CVE-2026-73052: CRITICAL XSS in SiYuan (<3.7.4) enables arbitrary JS & potential code execution if Node integration is enabled. Desktop users most at risk \u2014 upgrade ASAP & disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec", "creation_timestamp": "2026-08-16T04:30:23.963498Z"} https://vulnerability.circl.lu/sighting/9ab7605b-8898-453e-93b8-273fdd5987ec/export Sun, 16 Aug 2026 04:30:23 +0000 https://vulnerability.circl.lu/sighting/71e6bdbe-496c-4e33-8387-30c09d519fb5/export {"uuid": "71e6bdbe-496c-4e33-8387-30c09d519fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt672pkueq2f", "content": "SiYuan (pre-v3.7.4) hit by CRITICAL XSS (CVE-2026-73053). Crafted icons can execute code if Node integration is enabled. Patch status unclear \u2014 disable Node integration to reduce risk. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross...", "creation_timestamp": "2026-08-16T03:00:26.672103Z"} {"uuid": "71e6bdbe-496c-4e33-8387-30c09d519fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73053", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt672pkueq2f", "content": "SiYuan (pre-v3.7.4) hit by CRITICAL XSS (CVE-2026-73053). Crafted icons can execute code if Node integration is enabled. Patch status unclear \u2014 disable Node integration to reduce risk. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross...", "creation_timestamp": "2026-08-16T03:00:26.672103Z"} https://vulnerability.circl.lu/sighting/71e6bdbe-496c-4e33-8387-30c09d519fb5/export Sun, 16 Aug 2026 03:00:26 +0000