🟠 CVE-2026-100639 - High (8.8)

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button marku...

https://www.thehackerwire.com/vulnerability/CVE-2026-100639/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100638 - High (7.6)

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpo...

https://www.thehackerwire.com/vulnerability/CVE-2026-100638/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100637 - High (7.6)

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint...

https://www.thehackerwire.com/vulnerability/CVE-2026-100637/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-81655 - High (7.5)

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its ...

https://www.thehackerwire.com/vulnerability/CVE-2026-81655/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-86609 - High (8.8)

The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted th...

https://www.thehackerwire.com/vulnerability/CVE-2026-86609/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-100896 - Critical (9.9)

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the fu...

https://www.thehackerwire.com/vulnerability/CVE-2026-100896/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100636 - High (7.6)

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML end...

https://www.thehackerwire.com/vulnerability/CVE-2026-100636/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100646 - High (8.1)

SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8...

https://www.thehackerwire.com/vulnerability/CVE-2026-100646/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100645 - High (8)

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery...

https://www.thehackerwire.com/vulnerability/CVE-2026-100645/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100644 - High (7.5)

SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the...

https://www.thehackerwire.com/vulnerability/CVE-2026-100644/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100643 - High (8)

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textar...

https://www.thehackerwire.com/vulnerability/CVE-2026-100643/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100642 - High (7.6)

SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in t...

https://www.thehackerwire.com/vulnerability/CVE-2026-100642/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100641 - High (8)

SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it ...

https://www.thehackerwire.com/vulnerability/CVE-2026-100641/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100660 - High (7.5)

Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains u...

https://www.thehackerwire.com/vulnerability/CVE-2026-100660/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100657 - High (7.5)

Netty's STOMP codec (io.netty:netty-codec-stomp) contains a ByteBuf leak in StompSubframeDecoder....

https://www.thehackerwire.com/vulnerability/CVE-2026-100657/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100656 - High (7.5)

Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue growth flaw in HttpS...

https://www.thehackerwire.com/vulnerability/CVE-2026-100656/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100655 - High (7.5)

Netty (io.netty:netty-codec-http) versions up to and including 4.1.137.Final and from 4.2.0.Final...

https://www.thehackerwire.com/vulnerability/CVE-2026-100655/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100665 - High (7.5)

Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification ...

https://www.thehackerwire.com/vulnerability/CVE-2026-100665/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100664 - High (7.5)

Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.2.Final through 4.2.17.Final build...

https://www.thehackerwire.com/vulnerability/CVE-2026-100664/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100663 - High (7.5)

Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.2.Final through 4.2.17.Final does not ...

https://www.thehackerwire.com/vulnerability/CVE-2026-100663/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack