CVE-2026-73053 in SiYuaninformation

Résumé

par MITRE • 16/08/2026

SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with Node integration enabled, achieving arbitrary code execution on the host system.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Réserver

10/08/2026

Divulgation

16/08/2026

Modérer

accepté

Entrée

VDB-391068

CPE

prêt

CWE

CWE-79 (confirmé)

CVSS

9.0 (CNA)

EPSS

0.00000

KEV

non

Activités

faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-73053
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-73053
CVE Details	https://www.cvedetails.com/cve/CVE-2026-73053/

◂ Précédent Aperçu Suivant ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!