CVE-2026-74800 | SiYuan-Note SiYuan up to 3.7.3 Asset Serving cross site scripting

August 17, 2026 Yanac

A vulnerability labeled as problematic has been found in SiYuan-Note SiYuan up to 3.7.3. This vulnerability affects unknown code of the component Asset Serving. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-74800. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More