CVE-2026-73056

SiYuan kernel versions prior to 3.7.4 are affected by an unthrottled brute-force vulnerability in CheckAuth() that allows unauthenticated remote attackers to repeatedly guess the API token (via Authorization header or ?token=) without CAPTCHA/lockout, potentially gaining full RoleAdministrator ac...