<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 19 Aug 2026 17:45:24 +0000</lastBuildDate>
    <item>
      <title>efed15a3-725c-4ca9-8bc9-8ae137e62fee</title>
      <link>https://vulnerability.circl.lu/sighting/efed15a3-725c-4ca9-8bc9-8ae137e62fee/export</link>
      <description>{"uuid": "efed15a3-725c-4ca9-8bc9-8ae137e62fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117108157232824630", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel &amp;lt;3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:38.232060Z"}</description>
      <content:encoded>{"uuid": "efed15a3-725c-4ca9-8bc9-8ae137e62fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117108157232824630", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel &amp;lt;3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:38.232060Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/efed15a3-725c-4ca9-8bc9-8ae137e62fee/export</guid>
      <pubDate>Mon, 17 Aug 2026 01:04:38 +0000</pubDate>
    </item>
    <item>
      <title>68518e25-b284-44ef-ad43-bc6c46403d6a</title>
      <link>https://vulnerability.circl.lu/sighting/68518e25-b284-44ef-ad43-bc6c46403d6a/export</link>
      <description>{"uuid": "68518e25-b284-44ef-ad43-bc6c46403d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtaj2cal3p26", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel &amp;lt;3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:29.239884Z"}</description>
      <content:encoded>{"uuid": "68518e25-b284-44ef-ad43-bc6c46403d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtaj2cal3p26", "content": "CVE-2026-73056 - Critical auth bypass in SiYuan kernel &amp;lt;3.7.4. Unauthenticated attackers can brute-force API tokens via CheckAuth() middleware, no lockout. CVSS 9.8. Update immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73056/", "creation_timestamp": "2026-08-17T01:04:29.239884Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68518e25-b284-44ef-ad43-bc6c46403d6a/export</guid>
      <pubDate>Mon, 17 Aug 2026 01:04:29 +0000</pubDate>
    </item>
    <item>
      <title>e01992f1-2905-44dc-9ee1-3bce3934b023</title>
      <link>https://vulnerability.circl.lu/sighting/e01992f1-2905-44dc-9ee1-3bce3934b023/export</link>
      <description>{"uuid": "e01992f1-2905-44dc-9ee1-3bce3934b023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7kzigj3n2b", "content": "\ud83d\udea8 CVE-2026-73056 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T16:07:20.338290Z"}</description>
      <content:encoded>{"uuid": "e01992f1-2905-44dc-9ee1-3bce3934b023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7kzigj3n2b", "content": "\ud83d\udea8 CVE-2026-73056 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T16:07:20.338290Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e01992f1-2905-44dc-9ee1-3bce3934b023/export</guid>
      <pubDate>Sun, 16 Aug 2026 16:07:20 +0000</pubDate>
    </item>
    <item>
      <title>93cc40eb-0a33-4e6c-8fcd-96aedad72cc6</title>
      <link>https://vulnerability.circl.lu/sighting/93cc40eb-0a33-4e6c-8fcd-96aedad72cc6/export</link>
      <description>{"uuid": "93cc40eb-0a33-4e6c-8fcd-96aedad72cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt7degcjd22e", "content": "CVE-2026-73056 - siyuan\nOld versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-16T13:50:06.756596Z"}</description>
      <content:encoded>{"uuid": "93cc40eb-0a33-4e6c-8fcd-96aedad72cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt7degcjd22e", "content": "CVE-2026-73056 - siyuan\nOld versions of the SiYuan kernel have a weakness in how they handle API tokens. This makes it easy for an attacker to try many different tokens until they find the right one. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-16T13:50:06.756596Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/93cc40eb-0a33-4e6c-8fcd-96aedad72cc6/export</guid>
      <pubDate>Sun, 16 Aug 2026 13:50:06 +0000</pubDate>
    </item>
    <item>
      <title>f35d632c-ebe5-48ad-8552-eeaec6a88d2e</title>
      <link>https://vulnerability.circl.lu/sighting/f35d632c-ebe5-48ad-8552-eeaec6a88d2e/export</link>
      <description>{"uuid": "f35d632c-ebe5-48ad-8552-eeaec6a88d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt7cbccnrj24", "content": "CRITICAL vuln in siyuan-note siyuan: CVE-2026-73056 lets remote attackers brute-force API tokens for admin access. Use strong tokens &amp;amp; update kernel ASAP. Details: https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d354...", "creation_timestamp": "2026-08-16T13:30:28.586185Z"}</description>
      <content:encoded>{"uuid": "f35d632c-ebe5-48ad-8552-eeaec6a88d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt7cbccnrj24", "content": "CRITICAL vuln in siyuan-note siyuan: CVE-2026-73056 lets remote attackers brute-force API tokens for admin access. Use strong tokens &amp;amp; update kernel ASAP. Details: https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d354...", "creation_timestamp": "2026-08-16T13:30:28.586185Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f35d632c-ebe5-48ad-8552-eeaec6a88d2e/export</guid>
      <pubDate>Sun, 16 Aug 2026 13:30:28 +0000</pubDate>
    </item>
    <item>
      <title>e58c7d25-b3d2-4d0e-9da3-5675ae71da0b</title>
      <link>https://vulnerability.circl.lu/sighting/e58c7d25-b3d2-4d0e-9da3-5675ae71da0b/export</link>
      <description>{"uuid": "e58c7d25-b3d2-4d0e-9da3-5675ae71da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105428138280687", "content": "siyuan-note siyuan (kernel &amp;lt;3.7.4) hit by CRITICAL vuln: CVE-2026-73056 allows unlimited API token brute-forcing via CheckAuth(). Weak tokens = full admin takeover. Update &amp;amp; review tokens! \ud83d\udd11 https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d3540593a8ef28 #OffSeq #CVE202673056 #infosec", "creation_timestamp": "2026-08-16T13:30:26.700592Z"}</description>
      <content:encoded>{"uuid": "e58c7d25-b3d2-4d0e-9da3-5675ae71da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73056", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105428138280687", "content": "siyuan-note siyuan (kernel &amp;lt;3.7.4) hit by CRITICAL vuln: CVE-2026-73056 allows unlimited API token brute-forcing via CheckAuth(). Weak tokens = full admin takeover. Update &amp;amp; review tokens! \ud83d\udd11 https://radar.offseq.com/threat/cve-2026-73056-improper-restriction-of-excessive-authentication-attempts-in-siyuan-note-siyuan-28d3540593a8ef28 #OffSeq #CVE202673056 #infosec", "creation_timestamp": "2026-08-16T13:30:26.700592Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e58c7d25-b3d2-4d0e-9da3-5675ae71da0b/export</guid>
      <pubDate>Sun, 16 Aug 2026 13:30:26 +0000</pubDate>
    </item>
  </channel>
</rss>
