Siyuan

2 posts tagged with “Siyuan”

BREAKING: CVE-2026-73043 - SiYuan Template Calculation RCE in Desktop Client
cvesecurityvulnerability

BREAKING: CVE-2026-73043 - SiYuan Template Calculation RCE in Desktop Client

CVE-2026-73043 is a critical SiYuan flaw where unsanitized database Template calculation output reaches Electron innerHTML and can become OS command execution. Upgrade to 3.7.4 or later.

Aug 16, 2026
Read
BREAKING: CVE-2026-73046 - SiYuan Basic Auth Lockout Bypass Enables Admin Brute Force
cvesecurityvulnerability

BREAKING: CVE-2026-73046 - SiYuan Basic Auth Lockout Bypass Enables Admin Brute Force

CVE-2026-73046 is a CVSS 9.8 flaw in SiYuan that lets remote attackers bypass CAPTCHA and lockout controls through HTTP Basic Auth and brute-force the admin access code. Upgrade to 3.8.0 or later.

Aug 16, 2026
Read