https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 18:14:53 +0000 https://vulnerability.circl.lu/sighting/01e8833c-1f73-46bd-bc83-325e10ffd733/export {"uuid": "01e8833c-1f73-46bd-bc83-325e10ffd733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72809", "type": "seen", "source": "https://gist.github.com/alon710/942448215c158ca42cd356ec66bc6d93", "content": "# CVE-2026-72809: CVE-2026-72809: Authentication Bypass in SiYuan via Localhost Trust Spoofing\n\n> **CVSS Score:** 8.0\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72809\n\n## Summary\nAn authentication bypass vulnerability exists in the SiYuan personal knowledge management system (versions <= v3.7.2). The flaw occurs because the kernel's authorization validation handler trusts loopback connection origins blindly, allowing remote network attackers to gain administrative privileges via an exposed local reverse proxy.\n\n## TL;DR\nSiYuan versions <= 3.7.2 contain an authentication bypass where the backend kernel automatically grants administrative privileges to any request routed through the local fixed-port proxy due to insecure localhost IP validation. Upgrading to version 3.7.4 resolves the issue.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-290\n- **Attack Vector**: Local / Network (dependent on proxy binding configuration)\n- **CVSS v3.1 Score**: 8.0\n- **CVSS Vector**: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan personal knowledge management system (versions <= v3.7.2)\n- **SiYuan**: <= v3.7.2 (Fixed in: `v3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan Note to version v3.7.4 or newer\n- Restrict the fixed-port reverse proxy binding address to localhost (127.0.0.1)\n- Implement network firewall rules to block external access to port 6806\n\n**Remediation Steps:**\n1. Identify active installations of SiYuan running versions <= v3.7.2\n2. Download the v3.7.4 or newer release package from the official repository\n3. Apply the update and restart the backend kernel service\n4. Verify the binding interface configuration of port 6806 to confirm it is not exposed on external interfaces\n5. Test endpoint access from an external node to verify that administrative APIs return HTTP 403 or redirect to login\n\n## References\n\n- [GitHub Security Advisory GHSA-3mp7-4rh5-jrv9](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3mp7-4rh5-jrv9)\n- [SiYuan Fix Commit](https://github.com/siyuan-note/siyuan/commit/9c16e9851f0b5d7ed179e5c2fca15a7724666871)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/siyuan-before-authentication-bypass-via-localhost-trust)\n- [CVE-2026-72809 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-72809)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72809) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T09:32:48.633340Z"} {"uuid": "01e8833c-1f73-46bd-bc83-325e10ffd733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72809", "type": "seen", "source": "https://gist.github.com/alon710/942448215c158ca42cd356ec66bc6d93", "content": "# CVE-2026-72809: CVE-2026-72809: Authentication Bypass in SiYuan via Localhost Trust Spoofing\n\n> **CVSS Score:** 8.0\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72809\n\n## Summary\nAn authentication bypass vulnerability exists in the SiYuan personal knowledge management system (versions <= v3.7.2). The flaw occurs because the kernel's authorization validation handler trusts loopback connection origins blindly, allowing remote network attackers to gain administrative privileges via an exposed local reverse proxy.\n\n## TL;DR\nSiYuan versions <= 3.7.2 contain an authentication bypass where the backend kernel automatically grants administrative privileges to any request routed through the local fixed-port proxy due to insecure localhost IP validation. Upgrading to version 3.7.4 resolves the issue.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-290\n- **Attack Vector**: Local / Network (dependent on proxy binding configuration)\n- **CVSS v3.1 Score**: 8.0\n- **CVSS Vector**: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan personal knowledge management system (versions <= v3.7.2)\n- **SiYuan**: <= v3.7.2 (Fixed in: `v3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan Note to version v3.7.4 or newer\n- Restrict the fixed-port reverse proxy binding address to localhost (127.0.0.1)\n- Implement network firewall rules to block external access to port 6806\n\n**Remediation Steps:**\n1. Identify active installations of SiYuan running versions <= v3.7.2\n2. Download the v3.7.4 or newer release package from the official repository\n3. Apply the update and restart the backend kernel service\n4. Verify the binding interface configuration of port 6806 to confirm it is not exposed on external interfaces\n5. Test endpoint access from an external node to verify that administrative APIs return HTTP 403 or redirect to login\n\n## References\n\n- [GitHub Security Advisory GHSA-3mp7-4rh5-jrv9](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3mp7-4rh5-jrv9)\n- [SiYuan Fix Commit](https://github.com/siyuan-note/siyuan/commit/9c16e9851f0b5d7ed179e5c2fca15a7724666871)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/siyuan-before-authentication-bypass-via-localhost-trust)\n- [CVE-2026-72809 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-72809)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72809) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T09:32:48.633340Z"} https://vulnerability.circl.lu/sighting/01e8833c-1f73-46bd-bc83-325e10ffd733/export Fri, 04 Sep 2026 09:32:48 +0000 https://vulnerability.circl.lu/sighting/b431f12d-d76b-4398-ab6a-6c10cbd2cf18/export {"uuid": "b431f12d-d76b-4398-ab6a-6c10cbd2cf18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72809", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-3mp7-4rh5-jrv9", "content": "", "creation_timestamp": "2026-09-04T00:35:29.931624Z"} {"uuid": "b431f12d-d76b-4398-ab6a-6c10cbd2cf18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72809", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-3mp7-4rh5-jrv9", "content": "", "creation_timestamp": "2026-09-04T00:35:29.931624Z"} https://vulnerability.circl.lu/sighting/b431f12d-d76b-4398-ab6a-6c10cbd2cf18/export Fri, 04 Sep 2026 00:35:29 +0000