If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

cve-2026-62204

SiYuan before v3. 7. 4 Plugin Overwrite via Bazaar Install

·CVE Program
Read →
Vulnerabilities & Patches
Emerging1 src

CVE-2026-62204 - SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install

CVE ID : CVE-2026-62204 Published : Aug. 22, 2026, 12:26 p. m. • 44 minutes ago Description : SiYuan versions before v3. 7. 4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageName and repoURL parameters, achieving persistence across application restarts. Severity: 6.6 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.