CVE-2026-100640

SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by invoking clipboardReadMathML, clipboardReadOffice, and clipboardReadWPS commands with matching plaintext. Attackers controlling remote...

EUVD-2026-87734

SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by invoking clipboardReadMathML, clipboardReadOffice, and clipboardReadWPS commands with matching plaintext. Attackers controlling remote...

CVE-2026-100640

SiYuan versions before v3.8.4 are vulnerable to an authorization omission in the siyuan-get IPC handler. This flaw allows remote-kernel renderers to access native clipboard formats by invoking specific commands, including clipboardReadMathML, clipboardReadOffice, and clipboardReadWPS, using match...

PT-2026-99311

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description An authorization omission exists in the siyuan-get IPC handler. This allows remote-kernel renderers to access native clipboard formats by invoking the clipboardReadMathML, clipboardReadOffice, and...

QSIGE Security Vulnerabilities

QSIGE is an intelligent waiting management system from QSIGE, Inc. A security vulnerability exists in QSIGE that stems from omitting key control authorization, allowing an attacker to extract sensitive information from the API...