CVE-2026-72810

creationtimestamp| type| source ---|---|--- 2026-08-14 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt2aqucjel2p 2026-09-04 00:35:32+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-mw8r-mw84-88v2 2026-09-04 10:31:45+00:00| seen|...

CVE-2026-72810 SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket

SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers can establish a WebSocket connection to the publish surface and passively receive real-time content events including...