CVE-2026-73054

creationtimestamp| type| source ---|---|--- 2026-08-15 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5romoh3m26...

CVE-2026-73054

CVE-2026-73054 affects SiYuan versions before v3.7.4. The vulnerability is an authentication bypass in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocke...

CVE-2026-73054 SiYuan before v3.7.4 Authentication Bypass via WebSocket

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated...