49
CVEs
8
Critical
28
High
0
KEV
0
PoC
2
Unpatched C/H
95.9%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
8
HIGH
28
MEDIUM
12
LOW
1
Monthly CVE Trend
Affected Products (4)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-74800 | Stored cross-site scripting in SiYuan before v3.7.4 lets an authenticated user upload an HTML file through the asset-serving endpoint, which the server returns without Content-Disposition or X-Content-Type-Options headers, so the browser renders it inline instead of downloading it. When the workspace owner clicks the malicious asset link, the injected script runs in the app's origin with full kernel API access, enabling account and data compromise. Reported by VulnCheck with a vendor patch available; no public exploit has been identified at time of analysis. | CRITICAL | 9.4 | 0.3% | 47 |
|
| CVE-2026-74798 | Arbitrary file read and deletion in SiYuan kernel before v3.7.4 arises from an unvalidated id parameter in the database_clean MCP tool, letting an authenticated MCP client traverse the filesystem to copy any process-readable file into the history directory and then delete the original. This is the MCP-facing twin of a flaw previously fixed on the HTTP API path (GHSA-7hm9-v7vf-7g4w), meaning a known-bad code pattern survived in a second caller. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and not listed in CISA KEV. | CRITICAL | 9.3 | 0.4% | 47 |
|
| CVE-2026-82653 | Stored cross-site scripting in SiYuan before v3.8.1 lets a low-privileged attacker persist HTML/script payloads in bazaar package names and notebook names, which the confirmDialog() function interpolates unescaped into innerHTML. The script executes in a victim's browser session when they uninstall a malicious package or unlock an encrypted notebook, enabling session-context takeover of the note-taking application. No public exploit identified at time of analysis and no active exploitation is recorded. | CRITICAL | 9.3 | 0.2% | 47 |
|
| CVE-2026-82654 | Stored cross-site scripting in SiYuan before v3.8.1 lets an authenticated user plant HTML/script payloads in a block's name, alias, or memo field, which then execute in another user's session when that user views any document that references or displays the poisoned block via hint, backlink, or breadcrumb rendering. Because the malicious markup runs in the victim's authenticated context, an attacker can hijack sessions and act as the victim. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV. | CRITICAL | 9.3 | 0.2% | 47 |
|
| CVE-2026-75917 | Stored cross-site-scripting-to-RCE in SiYuan (the open-source personal knowledge-management/note app) before v3.7.4 lets an attacker-crafted document execute arbitrary OS commands on a victim's machine. Document metadata fields (bookmark, alias, memo, and an alternate name field) are concatenated unescaped into the aria-label attribute of the file-tree 'move/link to' path-picker tooltip; a double quote breaks out of the attribute and injects an inline event handler. Because every SiYuan Electron window runs with nodeIntegration:true, contextIsolation:false and no CSP, the handler reaches require('child_process') and achieves command execution the moment the victim hovers the malicious entry. There is no public exploit identified at time of analysis and it is not in CISA KEV. | CRITICAL | 9.3 | 0.2% | 47 |
|
| CVE-2026-75916 | Stored cross-site scripting escalating to arbitrary OS command execution affects the SiYuan personal knowledge-management application through version 3.7.3. Because the '((' block-reference autocomplete popup renders a candidate block's name, alias, and memo fields into HTML without escaping, an attacker who controls those metadata fields can plant a self-firing payload that runs the moment a victim types '((' and surfaces the crafted block; SiYuan's Electron shell runs with nodeIntegration enabled, contextIsolation disabled, and no CSP, so the injected script reaches require('child_process') and executes host commands. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the XSS-to-RCE chain is fully described by the VulnCheck advisory and vendor GHSA. | CRITICAL | 9.3 | 0.2% | 47 |
No patch
|
| CVE-2026-74902 | Cross-site scripting escalating to full remote code execution in SiYuan, an Electron-based personal knowledge-management and note-taking application, affects all releases before v3.7.4. The file-upload validation flow inserts unescaped filenames into the DOM via insertAdjacentHTML, so a filename carrying a script payload runs in the privileged renderer and reaches OS command execution when a victim drags, drops, or pastes the file into the editor. Reported by VulnCheck and fixed in v3.7.4; no public exploit identified at time of analysis. | CRITICAL | 9.3 | 0.1% | 47 |
|
| CVE-2026-74799 | Unauthenticated information disclosure in SiYuan before 3.7.4 exposes Go net/http/pprof debug endpoints (heap, goroutine, and related dumps) to any remote client whenever the application is not started with --mode set exactly to prod. Because non-prod is the effective default, attackers can query /debug/pprof/heap to scrape live process memory and recover secrets such as the AccessAuthCode and configured AI provider API keys. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis. | CRITICAL | 9.2 | 0.4% | 46 |
|
| CVE-2026-74868 | Unthrottled brute-force against SiYuan's Publish Service Basic Auth allows remote unauthenticated attackers to enumerate passwords against named publish-viewer accounts and gain read access to published notes and notebooks. All SiYuan releases before 3.7.4 are affected wherever the Publish Service is enabled and network-accessible on its default TCP port 6808. No public exploit code has been identified at time of analysis, but the attack is trivially automatable using any standard HTTP client given the complete absence of rate limiting, per-account lockout, or exponential backoff in the vulnerable code path. | HIGH | 8.7 | 0.4% | 44 |
|
| CVE-2026-85585 | Unbounded memory consumption in SiYuan's request-concurrency middleware allows unauthenticated remote attackers to permanently exhaust process memory by flooding the application with unique request paths. The root cause is a mutex-entry map that grows without bound - each distinct URL path creates a new mutex entry that is never evicted, causing memory and synchronization overhead to accumulate indefinitely. All SiYuan deployments prior to v3.8.2 are affected; no public exploit or CISA KEV listing has been identified at time of analysis. | HIGH | 8.7 | 0.4% | 44 |
|
| CVE-2026-74904 | Unauthenticated information disclosure in SiYuan before v3.7.4 exposes private knowledge-base content to anonymous publish-mode readers through 17 insufficiently protected block API endpoints in kernel/api/block.go. Remote attackers without credentials can enumerate arbitrary block IDs to retrieve private text content, structural metadata, and block existence information across the entire workspace. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch is available in v3.7.4 per GitHub Security Advisory GHSA-4vpg-gwqq-w44c. | HIGH | 8.7 | 0.4% | 44 |
|
| CVE-2026-85584 | Memory exhaustion denial-of-service in SiYuan's publish-service Basic Auth throttle allows unauthenticated remote attackers to crash or degrade the service by submitting authentication requests with an unbounded number of unique invalid usernames. Because the throttle tracks per-username failure state in memory with no capacity limit or eviction policy, the in-memory tracking structure grows without bound until the process exhausts available heap. All SiYuan versions prior to v3.8.2 are affected; no active exploitation has been identified at time of analysis. | HIGH | 8.7 | 0.3% | 44 |
|
| CVE-2026-85581 | Unauthenticated remote memory exhaustion in SiYuan before v3.8.2 allows any network-reachable attacker to degrade or crash the service by flooding the /api/system/uiproc endpoint with unique process identifiers. The endpoint retains each submitted identifier in memory without size bounds, rate limiting, or authentication checks, making the attack trivially automatable. No public exploit code or KEV status is confirmed at time of analysis, but the simplicity of exploitation via repeated HTTP requests requires no special tooling. | HIGH | 8.7 | 0.3% | 44 |
|
| CVE-2026-74906 | Publish-mode endpoint misconfiguration in SiYuan before v3.7.4 exposes operator-forbidden documents to anonymous remote visitors. Eight reader-facing API endpoints - covering search, backlinks, asset content, saved criteria, recent documents, graph, and tags - incorrectly apply the visibility access-control list rather than the disabled list, bypassing the intended publication restriction. Unauthenticated attackers can enumerate and read content that the SiYuan operator has explicitly marked as forbidden from publishing; no public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog. | HIGH | 8.7 | 0.3% | 44 |
|
| CVE-2026-85174 | SiYuan's full-text search logging mechanism writes admin API tokens in plaintext to an accessible log file when requests exceed internal timing thresholds, enabling authenticated low-privilege users to escalate to permanent administrative access. All self-hosted SiYuan instances before v3.8.2 are affected; because API tokens are passed as query parameters and the log file is retrievable via the built-in getFile endpoint, the privilege escalation path requires no additional exploitation steps beyond triggering a slow search and reading the file. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog. Vendor-released patch v3.8.2 resolves the issue. | HIGH | 8.7 | 0.3% | 44 |
|