{"vulnerability": "CVE-2026-77086", "sightings": [{"uuid": "6729674e-cb34-4c36-a887-7d7fcbd97edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmn5zpi5e2b", "content": "CVE-2026-77086 - siyuan\nThe SiYuan note\u2011taking app, versions prior to 3.7.4, does not check the package name you give when installing or removing add\u2011ons. An administrator who can access the app could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-21T20:50:06.361233Z"}, {"uuid": "c36182b4-19b0-43ef-9df7-d6d523cd13e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77086", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtlpwyfnmd2c", "content": "\ud83d\udea8 CVE-2026-77086 \u2014 CVSS 9.4 CRITICAL\n\nSiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77086\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T12:07:11.246528Z"}, {"uuid": "4a5c68fa-055e-4ca4-af9e-00faf72b5b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq7rrwmcc26", "content": "\ud83d\udd34 CVE-2026-77086 - Critical (9.1)\n\nSiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77086/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T07:01:16.346247Z"}]}