Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass publish-access controls enforced on the REST API. Attackers with publish reader tokens or anonymous access in disabled-auth mode can read templates, snippets, and export artifacts by directly accessing static routes that lack the same restrictions as their REST API counterparts.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 Go Gin Server, Authorization Bypass, #CVE-2026-72796 (High) -DC-Sep2026-2219 https://dailycve.com/go-gin-server-authorization-bypass-cve-2026-72796-high-dc-sep2026-2219/
Post summary
The post announces an Authorization Bypass in Go Gin Server (CVE-2026-72796), marking it as high severity, and directs readers to a DailyCVE article for further details.