If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 22, 2026 · 12:26via CVEFeed

CVE-2026-62204 - SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install

Brief

CVE ID : CVE-2026-62204

Published : Aug. 22, 2026, 12:26 p. m.

  • 44 minutes ago

Description : SiYuan versions before v3.

  • 4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageName and repoURL parameters, achieving persistence across application restarts.

Severity: 6.6

  • MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed→
Vulnerabilities & PatchesCVE-2026-62204