High severity7.5NVD Advisory· Published Aug 15, 2026· Updated Aug 26, 2026
CVE-2026-73045
CVE-2026-73045
Description
SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit unbounded password guesses without rate limiting or CAPTCHA to gain access to password-protected published notebooks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.7.4
Patches
Vulnerability mechanics
References
2News mentions
2- Siyuan Note: 25 Vulnerabilities Including RCE and Auth Bypass Disclosed TogetherVypr Intelligence · Aug 18, 2026
- Siyuan Note: 25 Vulnerabilities Including RCE and Auth Bypass Disclosed TogetherVypr Intelligence · Aug 15, 2026