{"vulnerability": "cve-2026-7304", "sightings": [{"uuid": "bdb93346-2602-499b-b62d-5dbfab2079ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4vkipbja2p", "content": "CVE-2026-7304 - CVE-2026-7304\nCVE ID : CVE-2026-7304\n \n Published : 18. Mai 2026 10:39 | 1\u00a0Stunde, 32\u00a0Minuten ago\n \n Description : SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is en...", "creation_timestamp": "2026-05-18T12:41:17.366029Z"}, {"uuid": "b83caac1-a8c2-4850-83f5-953206b57189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7304", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2sswfb2n", "content": "\ud83d\udd34 CVE-2026-7304 - Critical (9.8)\n\nSGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7304/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-18T17:00:57.599105Z"}, {"uuid": "2d318667-24bd-460b-9a54-a150fba38880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7304", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mm5fkxvud22r", "content": "\ud83d\udea8 Critical AI infrastructure flaw: CVE-2026-7304 affects SGLang runtimes with CVSS 9.8. Unsafe Python deserialization via dill.loads() can lead to unauthenticated remote code execution.  \n\ud83d\udd17 basefortify.eu/cve_reports/...  \n#CVE #AI #CyberSecurity", "creation_timestamp": "2026-05-18T17:28:06.478763Z"}, {"uuid": "0c7de79a-bb58-4dca-bbb1-b527d582d364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7304", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mm5fkzuwus2r", "content": "\ud83d\udea8 Critical AI infrastructure flaw: CVE-2026-7304 affects SGLang runtimes with CVSS 9.8. Unsafe Python deserialization via dill.loads() can lead to unauthenticated remote code execution.  \n\ud83d\udd17 basefortify.eu/cve_reports/...  \n#CVE #AI #CyberSecurity", "creation_timestamp": "2026-05-18T17:28:07.026282Z"}, {"uuid": "1204c54d-7e04-4fcc-bb4e-be080233216a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7304", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mm5fl5ujv22r", "content": "\ud83d\udea8 Critical AI infrastructure flaw: CVE-2026-7304 affects SGLang runtimes with CVSS 9.8. Unsafe Python deserialization via dill.loads() can lead to unauthenticated remote code execution.  \n\ud83d\udd17 basefortify.eu/cve_reports/...  \n#CVE #AI #CyberSecurity", "creation_timestamp": "2026-05-18T17:28:07.567399Z"}, {"uuid": "47669297-70ee-4547-90b9-511e150109fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73040", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnmz6p5nm2b", "content": "CVE-2026-73040\nIf a user is logged in to Dockge, they can trick the system with a specially crafted stack name to access files outside the intended area. This can expose secret configuration files (.env) and, if a compose\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:20:04.008494Z"}, {"uuid": "4abfde03-8e2f-4329-8bca-f76b13925d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7304", "type": "published-proof-of-concept", "source": "https://blog.securelayer7.net/cve-2026-7304-sglang-unauthenticated-rce", "content": "", "creation_timestamp": "2026-06-08T20:33:11.941000Z"}, {"uuid": "52b47b98-b781-43ae-be61-238bdc339af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73046", "type": "seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-17T18:00:05.228319Z"}, {"uuid": "dae6b060-1012-475e-a697-56b9b22e69d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73046", "type": "published-proof-of-concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-18T00:00:11.004441Z"}, {"uuid": "19c2b7d6-9df4-4ffa-8cdc-cd27f37ba752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73040", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkanmccqx22", "content": "\ud83d\udfe0 CVE-2026-73040 - High (8.8)\n\nDockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73040/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T22:00:51.894467Z"}, {"uuid": "d83246d1-a828-4a93-8ada-7850c2348b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73041", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5pxcrvs425", "content": "CVE-2026-73041 - siyuan\nSiYuan versions before v3.7.4 have a security issue that could allow an attacker to run malicious code on a user's device if they open a specially crafted PDF with annotations. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T22:30:05.912690Z"}, {"uuid": "18f4b681-14b9-4b12-9393-4032072e827d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73042", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5qj5lqux2e", "content": "CVE-2026-73042 - siyuan\nSiYuan versions before 3.7.4 are vulnerable to a security risk. Attackers can inject malicious code into menus by manipulating field descriptions or names. To protect your system,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T22:40:04.738708Z"}, {"uuid": "c38fb0c6-8097-4663-9e1c-d5727c6f87c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73043", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5qj73uhv2j", "content": "CVE-2026-73043 - siyuan\nSiYuan versions before 3.7.4 have a security weakness that allows an attacker to execute code on a user's computer. This could happen when a user opens a database that contains\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T22:40:05.975962Z"}, {"uuid": "3fc09b80-4ab5-4e53-aa97-f9c657426c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73044", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5r325jg42y", "content": "CVE-2026-73044 - siyuan\nSiYuan software versions before 3.7.4 have a security issue. Attackers can inject malicious code into table styles, potentially running unauthorized scripts on users' computers. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T22:50:05.346084Z"}, {"uuid": "b6a9666b-a2d6-430e-a305-8b84d823ac60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73046", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5r33j63z2f", "content": "CVE-2026-73046 - siyuan\nSiYuan versions before 3.7.4 have a security issue that allows unauthorized users to access the admin panel. This could be exploited by hackers to gain control over the system. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-15T22:50:06.223312Z"}, {"uuid": "84f4076b-1c1d-48b5-ad5b-69f52a0800ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73042", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5rptslbh2r", "content": "\ud83d\udd34 CVE-2026-73042 - Critical (9)\n\nSiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73042/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T23:01:43.623016Z"}, {"uuid": "faaebd26-b48d-4443-9a50-c9882e170acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73044", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5rqc2p2a2z", "content": "\ud83d\udd34 CVE-2026-73044 - Critical (9)\n\nSiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73044/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T23:01:59.562412Z"}, {"uuid": "574e11b4-5b24-4b4a-97cb-d25c44672c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73043", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5rq2tvfu26", "content": "\ud83d\udd34 CVE-2026-73043 - Critical (9)\n\nSiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calcu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73043/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T23:01:51.722573Z"}, {"uuid": "cbf92172-d87c-41c3-b896-4d45a6cf6a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5uz564qo2o", "content": "\ud83d\udfe0 CVE-2026-73045 - High (7.5)\n\nSiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnera...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73045/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T00:00:36.734024Z"}, {"uuid": "34df9886-6800-482f-b296-aa525fa5c5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73046", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5uze3d4m2t", "content": "\ud83d\udd34 CVE-2026-73046 - Critical (9.8)\n\nSiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() mi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73046/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T00:00:44.149118Z"}, {"uuid": "cf359136-f600-4eb3-b48c-cd692878c70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73041", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5v26y2vh2l", "content": "\ud83d\udd34 CVE-2026-73041 - Critical (9)\n\nSiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73041/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T00:01:12.885563Z"}, {"uuid": "b16fb37f-1454-447a-8064-5a9735a1cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73041", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt634kpcir2g", "content": "SiYuan v3.7.4\u672a\u6e80\u306f\u3001\u30a2\u30ce\u30c6\u30fc\u30b7\u30e7\u30f3\u30d5\u30a3\u30fc\u30eb\u30c9\u306e\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001PDF\u30ec\u30f3\u30c0\u30e9\u30fc\u3067\u30b9\u30af\u30ea\u30d7\u30c8\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u3002\nCVE-2026-73041 CVSS 9.0 | CRITICAL", "creation_timestamp": "2026-08-16T01:49:53.551376Z"}, {"uuid": "3e8d7ccf-4fec-4e35-b780-e53719525b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73042", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt636l5yc52w", "content": "SiYuan v3.7.4\u672a\u6e80\u306e\u8106\u5f31\u6027\u3002\u30d5\u30a3\u30fc\u30eb\u30c9\u8a18\u8ff0\u3084\u540d\u524d\u306b\u653b\u6483\u8005\u304c\u633f\u5165\u3057\u305fHTML\u3067\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-73042 CVSS 9.0 | CRITICAL", "creation_timestamp": "2026-08-16T01:51:00.699394Z"}]}