If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 22, 2026 · 12:26via CVEFeed

CVE-2026-60084 - SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate

Brief

CVE ID : CVE-2026-60084

Published : Aug. 22, 2026, 12:26 p. m.

  • 44 minutes ago

Description : SiYuan versions before v3.

  • 4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os. RemoveAll. Authenticated admin attackers can supply absolute filesystem paths to recursively delete any file or directory the kernel process has permission to remove, anywhere on the host filesystem.

Severity: 8.7

  • HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed→
Vulnerabilities & PatchesCVE-2026-60084