Skip to content
Threat Feed
Subscribe

Product

SiYuan Kernel (< 0.0.0-20260731131820-67bc300b6ea6)

1 brief RSS
high advisory

SiYuan Kernel: Unauthenticated event stream access via URI parser differential (CVE-2026-73054)

A parser differential in the SiYuan kernel WebSocket implementation allows unauthenticated attackers to bypass authentication by using duplicated query parameters, granting unauthorized access to the live event stream.

SiYuan kernel web-application websocket rce-precursor information-disclosure
1r 1t 1c