CVE-2026-72810

creationtimestamp| type| source ---|---|--- 2026-08-14 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt2aqucjel2p...

CVE-2026-72810 SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket

SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers can establish a WebSocket connection to the publish surface and passively receive real-time content events including...