CVE-2026-73053 in SiYuan

الملخص

بحسب MITRE • 15/08/2026

SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with Node integration enabled, achieving arbitrary code execution on the host system.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: VulnCheck
• حجز: 10/08/2026
• إفشاء: 15/08/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-391068
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 9.0 (CNA)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-73053
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73053
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-73053/