Skip to content
Threat Feed
Subscribe

Tag

Rce-Precursor

1 brief RSS
high advisory

SiYuan Kernel: Unauthenticated event stream access via URI parser differential (CVE-2026-73054)

A parser differential in the SiYuan kernel WebSocket implementation allows unauthenticated attackers to bypass authentication by using duplicated query parameters, granting unauthorized access to the live event stream.

SiYuan kernel web-application websocket rce-precursor information-disclosure
1r 1t 1c