CVE-2026-74868

SiYuan before 3.7.4 has an unthrottled brute-force flaw in PublishServiceTransport.RoundTrip() (kernel/server/proxy/publish.go), where the Publish Service (default TCP 6808) applies Basic Auth with no rate limiting, lockout, or backoff, letting unauthenticated remote attackers guess passwords aga...

CVE-2026-74802

SiYuan versions before 3.7.4 set the WebSocket CheckOrigin handler to unconditionally return true on the admin-only /ws/network/proxy endpoint, allowing cross-site WebSocket hijacking. A malicious webpage can make the victim's SiYuan kernel proxy arbitrary network traffic, enabling authenticated ...

CVE-2026-74867

SiYuan versions before 3.7.4 are affected by a cross-site request forgery (CSRF) vulnerability in the session-cookie authentication branch of CheckAuth() . The root cause is the absence of Origin/Referer header validation combined with the lack of an explicit SameSite attribute on session cookies...

CVE-2026-74801

SiYuan before 3.7.4 fails to escape workspace directory paths passed to the elevated elevator.exe helper. An attacker can create a directory containing command metacharacters, then trigger the Microsoft Defender exclusion flow to execute arbitrary commands as administrator after UAC approval. CVS...

CVE-2026-74800

SiYuan before v3.7.4 serves uploaded HTML files without Content-Disposition or X-Content-Type-Options headers, enabling authenticated attackers to inject stored XSS that runs with full kernel API access when the workspace owner clicks the asset link; upgrade to v3.7.4 or later. No active exploita...

CVE-2026-74799

SiYuan (note-taking app) before version 3.7.4 registers Go net/http/pprof debug endpoints (e.g., /debug/pprof/heap, goroutine dumps) without authentication whenever the --mode flag is not exactly prod. An unauthenticated network attacker can request these endpoints to extract in-memory secrets, i...

CVE-2026-74798

SiYuan kernel versions before v3.7.4 contain a path traversal vulnerability in the database_clean MCP tool . The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView (kernel/model/attribute_view.go), which builds a filesystem path via filepat...

CVE-2026-74842

A server-side request forgery (SSRF) vulnerability exists in the Image-Toolkit-MCP-Server component of Kira-Pgr PromptShopMCP (up to commit 5bc0cd17358e19a5415d11a531088170d7b81452). The download_image function in server.py fails to properly validate the image_url argument, allowing a remote atta...

CVE-2026-74845

CVE-2026-74845 concerns the Official Document Management System by 2100 Technology, with an Arbitrary File Upload vulnerability that enables authenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. From the connected references, ...

CVE-2026-49303

The CVE-2026-49303 entry describes a permission control vulnerability in the Huawei notification module. The issue is rated CVSS v3.1: 5.1 (Medium) with a LOCAL attack vector, no privileges required , and no user interaction , potentially impacting availability. Connected documents reiterate the ...

CVE-2026-49301

Technical details beyond the basic description are not publicly available in the provided documents. Monitor for updates from Huawei CVE coverage and the CVE/CVE-List records.

CVE-2026-49305

Technical details about CVE-2026-49305 are not publicly available in the provided documents. Monitor Huawei consumer bulletin updates for further specifics.

CVE-2026-49308

CVE-2026-49308 describes a permission control vulnerability in the clipboard module. According to the records, exploitation is local with low attack complexity and requires user interaction, yielding a CVSS v3.1 base score of 5.5 (Medium) and a confidentiality impact (C) of High, with no impact o...

CVE-2026-49306

CVE-2026-49306 is described as a use-after-free (UAF) vulnerability in the time and time zone module, impacting availability. The available context references Huawei consumer device bulletins (laptops, vision, wearables), with a CVSS v3.1 base score of 3.3 (LOW) and an exploit vector limited to l...

CVE-2026-49304

CVE-2026-49304 describes a permission control vulnerability in the device key management module with an availability impact. The CVSS 3.1 base score is 6.2 (Medium) with LOCAL attack vector, LOW attack complexity, NO privileges required, and NO user interaction; impact is limited to Availability ...

CVE-2026-49302

A vulnerability (CVE-2026-49302) with a permission control issue in the notification service module could affect service confidentiality if exploited locally with low complexity and no user interaction (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base score 6.2). The description does not provi...

CVE-2026-58561

CVE-2026-58561 is a null pointer dereference in the image codec module that can impact availability. The CVSS 3.1 vector (LOCAL, LOW complexity, NO user interaction, NONE privileges, UNCHANGED scope) yields a MEDIUM base score (4.0) with availability impact set to LOW; exploitation appears to req...

CVE-2026-58560

Technical details about CVE-2026-58560 are not publicly available in the provided documents. Monitor for updates from Huawei and the CVE entry for further information.

CVE-2026-49307

CVE-2026-49307 describes a permission control vulnerability in the device’s multi-mode input module, affecting confidentiality. CVSS 3.1 base score 6.2 (MEDIUM); attack vector LOCAL, complexity LOW, privileges NONE, user interaction NONE, scope UNCHANGED, with confidentiality impact HIGH. There a...

CVE-2026-20000

The connected CVE details a SQL injection in itsourcecode Hospital Management System 1.0, impacting the /viewprescriptionrecord.php script via the delid parameter. The vulnerability arises from manipulating delid, allowing remote attacker input to affect database queries. Public exploitation is i...