DEV Community: CVE Reports

CVE-2026-92957: CVE-2026-92957: Sandbox Escape and Remote Code Execution in vm2 via node: Prefix Policy Bypass

CVE Reports — Fri, 02 Oct 2026 04:30:31 +0000

CVE-2026-92957: Sandbox Escape and Remote Code Execution in vm2 via node: Prefix Policy Bypass

Vulnerability ID: CVE-2026-92957
CVSS Score: 9.9
Published: 2026-10-01

A vulnerability in the NodeVM component of the vm2 sandbox package through version 3.11.6 allows sandboxed code to bypass security policies restricting access to built-in modules. When a wildcard require policy is configured with negative deny entries using the 'node:' prefix (e.g., '-node:child_process'), the parser fails to recognize the exemption due to exact string comparison. As a result, the unmitigated module is registered, allowing sandboxed code to import the host child_process module and execute arbitrary system commands.

TL;DR

vm2 fails to normalize the 'node:' prefix in negative builtin policy entries, allowing sandboxed code to load disallowed modules like 'child_process' and achieve remote code execution on the host.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-269
Attack Vector: Network
CVSS v3.1 Score: 9.9 (Critical)
CVSS v4.0 Score: 9.4 (Critical)
EPSS Score: 0.00537 (43.14th percentile)
Exploit Maturity: Proof of Concept
CISA KEV Status: Not Listed

Affected Systems

vm2 sandbox environments running version 3.11.6 or earlier
vm2: <= 3.11.6 (Fixed in: 3.11.7)

Code Analysis

Commit: b0f5066

fix(GHSA-8686-vhfx-7r3j): normalize the node: prefix on negative builtin deny tokens

@@ -12,3 +12,9 @@\n \t\t\t\tconst name = BUILTIN_MODULES[i];\n-\t\t\t\tif (builtins.indexOf(`-${name}`) === -1) {\n+\t\t\t\t// SECURITY (GHSA-8686-vhfx-7r3j): a negative deny token may be\n+\t\t\t\t// spelled with the `node:` URL prefix (`-node:child_process`),\n+\t\t\t\t// matching how `require()` accepts `node:`-prefixed specifiers.\n+\t\t\t\t// The exact-string match only recognized `-child_process`, so the\n+\t\t\t\t// `node:` spelling was a silent no-op and left the real host\n+\t\t\t\t// module exposed under `builtin: ['*']`. Match BOTH spellings.\n+\t\t\t\tif (builtins.indexOf(`-${name}`) === -1 && builtins.indexOf(`-node:${name}`) === -1) {\n \t\t\t\t\taddDefaultBuiltin(res, name, hostRequire);\n

Mitigation Strategies

Upgrade the vm2 package to version 3.11.7 or later to resolve the prefix normalization error.
Avoid wildcard configurations with negative exclusions. Instead, explicitly define a strict allowlist containing only the minimal set of required modules.
Migrate existing sandboxed execution flows away from vm2 to alternative isolation boundaries such as WebAssembly runtimes or containerized processes.

Remediation Steps:

Identify all projects and configurations utilizing the vm2 package.
Review configuration files initializing NodeVM, locating any occurrences of wildcard require policies containing negative deny tokens (e.g., 'builtin: ["*", "-node:..."]').
Update package.json dependencies to target 'vm2': '^3.11.7'. Run npm install or yarn install to apply the patch.
If upgrading is not immediately possible, rewrite the NodeVM options block to explicitly allow only specific safe built-in libraries (e.g., builtin: ['path', 'url']) and avoid using wildcard rules combined with exemptions.

References

Read the full report for CVE-2026-92957 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-92958: CVE-2026-92958: Built-in Module Denylist Bypass via fs/promises in vm2 NodeVM Subsystem

CVE Reports — Fri, 02 Oct 2026 03:30:30 +0000

CVE-2026-92958: Built-in Module Denylist Bypass via fs/promises in vm2 NodeVM Subsystem

Vulnerability ID: CVE-2026-92958
CVSS Score: 8.5
Published: 2026-10-01

CVE-2026-92958 is a high-severity sandbox escape and denylist bypass vulnerability within the NodeVM subsystem of the vm2 sandboxing library. When configuring wildcards with negative deny entries, exact-string matches fail to block subpaths like fs/promises. Sandboxed code can import these subpaths to bypass isolation and execute arbitrary filesystem operations on the host.

TL;DR

A denylist bypass vulnerability in vm2 <= 3.11.6 allows sandboxed code to bypass security rules by importing unblocked subpath modules like fs/promises, enabling arbitrary write access to the host filesystem.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-269
Attack Vector: Network
CVSS v3.1: 8.5
EPSS Score: 0.00384
Exploit Status: PoC
CISA KEV Status: Not Listed

Affected Systems

vm2 Node.js sandboxing library
vm2: <= 3.11.6 (Fixed in: 3.11.7)

Code Analysis

Commit: 59d35f6

Fix builtin-module denylist bypass in NodeVM

Exploit Details

GitHub Security Advisory: No description

Mitigation Strategies

Upgrade the vm2 package to version 3.11.7 or higher.
Manually list all subpath modules in the deny list of NodeVM if upgrading is not immediately possible.
Migrate away from the deprecated vm2 library to stronger isolation runtimes such as WebAssembly or Docker containers.

Remediation Steps:

Run 'npm install vm2@3.11.7' to apply the update.
Audit existing NodeVM initialization configurations to ensure negative rules include both parent and subpath modules.
Validate the sandbox constraints using automated test suites.

References

Read the full report for CVE-2026-92958 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-92951: CVE-2026-92951: Sandbox Escape via External Package Allowlist Bypass in vm2

CVE Reports — Fri, 02 Oct 2026 02:31:02 +0000

CVE-2026-92951: Sandbox Escape via External Package Allowlist Bypass in vm2

Vulnerability ID: CVE-2026-92951
CVSS Score: 9.9
Published: 2026-10-01

An incorrect authorization and directory traversal vulnerability in the vm2 library before version 3.11.7 allows remote attackers to bypass the sandbox's external package allowlist. This flaw permits sandboxed code to resolve and execute arbitrary packages available on the host filesystem under host privileges, leading to unauthenticated sandbox escape and host code execution.

TL;DR

A flaw in vm2's bare-specifier matcher allowlist check allows sandbox escape. It uses unanchored substring matching and fails to filter directory traversal sequences, allowing untrusted code to load and execute arbitrary host packages with full authority.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-706, CWE-863, CWE-829
Attack Vector: Network
CVSS v3.1 Score: 9.9 (Critical)
Exploit Status: Proof of Concept (PoC) documented in test suite
CISA KEV Status: Not Listed
EPSS Score: 0.00539
Impact: Complete Sandbox Escape & Host Code Execution

Affected Systems

Applications executing untrusted code using vm2 NodeVM configurations
Multi-tenant plugin hosting systems relying on vm2 external module allowlists
Serverless runtimes and webhooks using deprecated vm2 sandbox instances
vm2: < 3.11.7 (Fixed in: 3.11.7)

Code Analysis

Commit: ab4ee7d

Security fix for external-package allowlist bypass in LegacyResolver

@@ -109,7 +109,16 @@\n\t\tthis.externalCache = externals.map(pattern => new RegExp('^(?:' + makeExternalMatcherRegex(pattern) + ')(?:[\\\\/].*)?$'));\n@@ -184,6 +193,18 @@\n\t\t\tif (x.split(/[\\/]/).indexOf('..') !== -1) return undefined;

Exploit Details

GitHub security advisory test cases: Functional unit tests demonstrating unanchored regex match and path traversal validation bypasses

Mitigation Strategies

Upgrade vm2 to version 3.11.7 or later where the boundaries of external matchers are strictly anchored and traversal sequences are rejected.
Migrate to robust isolation mechanisms such as isolates (e.g., isolated-vm), WebAssembly (WASM) runtimes, or containerized execution.
Implement strong OS-level sandboxing (such as AppArmor, gVisor, or Docker with non-root configurations) to limit the damage of an escape.

Remediation Steps:

Identify all direct and transitive dependencies on the 'vm2' package in your project's lockfile.
Update the package.json dependency for 'vm2' to '^3.11.7'.
Run your package manager's installation command (e.g., 'npm install' or 'yarn install') to apply the patch.
Verify that the compiled regex mappings inside 'lib/resolver-compat.js' match the anchored patterns.

References

Read the full report for CVE-2026-92951 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-92940: CVE-2026-92940: Host-Realm Credential Exposure and Socket Hijacking via globalAgent in vm2

CVE Reports — Fri, 02 Oct 2026 01:30:30 +0000

CVE-2026-92940: Host-Realm Credential Exposure and Socket Hijacking via globalAgent in vm2

Vulnerability ID: CVE-2026-92940
CVSS Score: 10.0
Published: 2026-10-01

A critical vulnerability in the Node.js sandbox library vm2 allows sandboxed code to retrieve the process-wide http.globalAgent and https.globalAgent singletons. By attaching event listeners to these host-realm emitters, sandboxed code can intercept host-realm network requests, capturing sensitive Authorization headers and hijacking active TLSSocket streams.

TL;DR

A sandbox escape in vm2 (versions 3.11.3 to 3.11.6) allows untrusted code to access and hook the host process-wide http/https globalAgent. This enables unauthenticated attackers to steal sensitive headers (like Bearer tokens) and hijack active sockets during unrelated host-realm requests.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-668: Exposure of Resource to Wrong Sphere
Attack Vector: Network (AV:N)
CVSS v3.1 Score: 10.0 (Critical)
EPSS Score: 0.00474 (Percentile: 38.70%)
Impact: Host Credential Disclosure & Transport Socket Hijacking
Exploit Status: Proof-of-Concept (PoC) available via official regression test suite
CISA KEV Status: Not Listed

Affected Systems

vm2 (npm package)
vm2: >= 3.11.3, <= 3.11.6 (Fixed in: 3.11.7)

Code Analysis

Commit: aa146a7

Implement member-level sanitization for built-in HTTP and HTTPS agents to prevent globalAgent exposure inside the sandbox context.

--- a/lib/builtin.js
+++ b/lib/builtin.js
+// Adds sanitization and overwrites request/get to use sandboxed agents

Exploit Details

GitHub Security Advisory: Details the vulnerability report, the architectural mechanism of the escape, and provides the reproduction script used as verification.

Mitigation Strategies

Upgrade vm2 to version 3.11.7 or newer to apply member-level neutralization on built-in HTTP/HTTPS modules.
Disable the 'http' and 'https' built-in modules inside the NodeVM configuration settings to remove the attack vector entirely.
Implement outbound network requests outside of the sandbox boundary using a strictly validated custom host-realm API rather than exposing native raw network modules.
Transition application architectures away from vm2 to modern isolated runtimes, such as isolated-vm or VM containers.

Remediation Steps:

Locate and audit package.json and project lockfiles for vm2 references within versions 3.11.3 and 3.11.6.
Run 'npm install vm2@3.11.7' or 'yarn upgrade vm2@3.11.7' to deploy the patched library version.
Review initialization scripts of NodeVM to ensure that 'http' and 'https' are absent from the require.builtin array.
Validate the fix by executing the official regression test to ensure host globalAgent is no longer reachable from the sandbox environment.

References

Read the full report for CVE-2026-92940 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-92950: CVE-2026-92950: Sandbox Escape Vulnerability in vm2 CLI

CVE Reports — Fri, 02 Oct 2026 00:31:31 +0000

CVE-2026-92950: Sandbox Escape Vulnerability in vm2 CLI

Vulnerability ID: CVE-2026-92950
CVSS Score: 9.3
Published: 2026-10-01

CVE-2026-92950 (GHSA-jxxv-8r27-vm4p) is a critical sandbox escape vulnerability in the command-line interface of the vm2 library prior to version 3.11.7. The flaw allows untrusted scripts to bypass sandbox constraints and execute arbitrary system commands with the privileges of the host process by exploiting insecure default configurations of the module resolver.

TL;DR

A design flaw in the vm2 CLI tool permits sandboxed code to load local files in the host execution realm, resulting in a complete sandbox escape and unauthenticated arbitrary command execution.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-453 (Insecure Default Variable Initialization)
Attack Vector: Local
CVSS v4.0 Score: 9.3 (Critical)
EPSS Score: 0.00197 (8.53rd Percentile)
Exploit Status: Proof-of-Concept Publicly Available
KEV Status: Not Listed

Affected Systems

vm2 CLI (npm package)
vm2: < 3.11.7 (Fixed in: 3.11.7)

Code Analysis

Commit: 903017c

Fix escape when running vm2 command line tool with require.root and require.context limits

Exploit Details

GitHub Security Advisory: GHSA advisory describing the insecure default options and reproduction payload.

Mitigation Strategies

Upgrade the vm2 library to version 3.11.7 or higher.
Configure NodeVM instances with a explicitly specified require.root directory.
Set require.context to 'sandbox' to enforce compilation boundaries within the VM.
Migrate to runtime containerization or process-level isolation models.

Remediation Steps:

Identify all global and local installations of the vm2 npm package.
Run 'npm install vm2@3.11.7' or update package.json dependencies to target >=3.11.7.
Audit custom NodeVM configuration code to verify that require.external is not used without require.root.
Validate remediation by testing custom modules against the self-require exploit pattern.

References

Read the full report for CVE-2026-92950 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-92948: CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test

CVE Reports — Thu, 01 Oct 2026 23:30:31 +0000

CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test

Vulnerability ID: CVE-2026-92948
CVSS Score: 9.9
Published: 2026-10-01

CVE-2026-92948 is a critical sandbox escape vulnerability in the vm2 library affecting versions 3.9.6 through 3.11.6 when executed on Node.js 24 and newer. The vulnerability allows an attacker to bypass built-in module blocking defenses by double-prefixing a restricted module name (such as node:node:test). This permits the loading of the node:test module, whose test runner execution can be leveraged to execute arbitrary shell commands outside the VM sandbox.

TL;DR

A critical sandbox escape in vm2 (versions >=3.9.6 to <=3.11.6) allows attackers to execute arbitrary system commands on the host by leveraging a prefix-stripping flaw to import the 'node:test' core module on Node.js 24+.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-693
Attack Vector: Network
CVSS Score: 9.9 (Critical)
EPSS Score: 0.00654
Impact: Complete Sandbox Escape & Host Remote Code Execution
Exploit Status: Proof-of-Concept Available
KEV Status: Not Listed

Affected Systems

vm2 (npm package) running on Node.js 24+
vm2: >= 3.9.6, <= 3.11.6 (Fixed in: 3.11.7)

Code Analysis

Commit: 415339f

Fix GHSA-qhwx-74w5-xhxq: sanitize input and block dangerous builtins recursively

Exploit Details

GitHub Security Advisory: Vulnerability disclosure detailing the node:test sandbox escape exploit vector.

Mitigation Strategies

Upgrade vm2 to version 3.11.7 or later to apply recursive prefix validation.
Explicitly remove wildcard ('*') and 'node:test' from the VM's builtin allowlist.
Migrate to isolated-vm to use secure V8 isolate-based boundaries instead of vm2.
Execute untrusted code within secure container environments (e.g., Docker, gVisor) to limit host system exposure.

Remediation Steps:

Identify all microservices and dependencies utilizing the vm2 npm package.
Update package.json to specify vm2 version 3.11.7 or newer, then execute 'npm install'.
Inspect NodeVM configurations to ensure the 'builtin' array does not contain '*' or 'node:test'.
Plan the deprecation of vm2 in favor of a containerized execution model or isolated-vm.

References

Read the full report for CVE-2026-92948 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-92952: CVE-2026-92952: Sandbox Escape and State Corruption in vm2 via Node.js-internal Symbol Leak

CVE Reports — Thu, 01 Oct 2026 22:30:29 +0000

CVE-2026-92952: Sandbox Escape and State Corruption in vm2 via Node.js-internal Symbol Leak

Vulnerability ID: CVE-2026-92952
CVSS Score: 8.9
Published: 2026-10-01

A high-severity sandbox escape and state corruption vulnerability exists in the vm2 library (versions 3.11.4 through 3.11.6). The vulnerability is caused by an incomplete blocklist of Node.js-internal registered symbols crossing the sandbox-host bridge boundary. Specifically, the filters in lib/setup-sandbox.js and write traps in lib/bridge.js omitted the symbols nodejs.stream.disturbed and nodejs.stream.errored, allowing untrusted code within the sandbox to corrupt host-realm stream state checks.

TL;DR

An incomplete blocklist of Node.js-internal symbols in vm2 (3.11.4-3.11.6) allows sandboxed code to access host-realm stream symbols, corrupt stream state accessors on the host, and bypass security gates.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-669
Attack Vector: Adjacent/Remote dependent on application exposure
CVSS v4.0 Score: 8.9
EPSS Score: 0.00461 (Percentile: 37.62%)
Impact: High Integrity Impact / Sandbox Escape
Exploit Status: PoC / Non-weaponized
KEV Status: Not Listed

Affected Systems

vm2 library (versions 3.11.4 through 3.11.6) running on Node.js runtimes containing web streams
vm2: >= 3.11.4, <= 3.11.6 (Fixed in: 3.11.7)

Code Analysis

Commit: a45444d

Fix dangerous-symbol filtering bypass (GHSA-jf8q-945g-9q4c) by utilizing a namespace-based catch-all check.

Exploit Details

GitHub: The advisory contains structural details and unit test definitions showing how the bypass behaves on modern Node.js versions.

Mitigation Strategies

Upgrade vm2 dependency to version 3.11.7 immediately to apply namespace symbol filtering.
Migrate to process-isolated script execution architectures such as isolated-vm or isolated container sandboxes.
Implement strong input validation to prevent user-supplied script execution within single-isolate virtual machines.

Remediation Steps:

Identify all direct and transitive dependencies on vm2 in package.json files.
Update the vm2 dependency to version 3.11.7 using npm install vm2@3.11.7 or yarn upgrade vm2@3.11.7.
Validate host application behaviors by executing unit tests on stream handling mechanisms.
Plan and execute an architecture migration to replace deprecated vm2 isolates with subprocess boundaries.

References

Read the full report for CVE-2026-92952 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-73607: CVE-2026-73607: Missing Authorization in SiYuan /api/storage/getOutlineStorage Leads to Information Disclosure

CVE Reports — Thu, 01 Oct 2026 21:30:31 +0000

CVE-2026-73607: Missing Authorization in SiYuan /api/storage/getOutlineStorage Leads to Information Disclosure

Vulnerability ID: CVE-2026-73607
CVSS Score: 5.8
Published: 2026-10-01

An architectural evaluation of CVE-2026-73607 in the SiYuan personal knowledge management system. This technical advisory details a Missing Authorization (CWE-862) vulnerability in the Go-based backend kernel, specifically within the outline storage API endpoint. Under certain configurations, authenticated low-privilege users can query metadata, heading structures, and block hierarchies of restricted documents.

TL;DR

A Broken Object Level Authorization (BOLA) vulnerability in SiYuan prior to v3.7.4 allows authenticated users to extract document outlines and structural metadata of unauthorized notes via the /api/storage/getOutlineStorage API endpoint.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-862 (Missing Authorization)
Attack Vector: Network (AV:N)
CVSS v3.1 / v4.0: 5.8 (Medium) / 6.9 (Medium)
EPSS Score: 0.00325 (Percentile: 23.20%)
Impact: Information Disclosure (Confidentiality: Low)
Exploit Status: PoC Available / No Active Exploitation
KEV Status: Not Listed

Affected Systems

SiYuan Personal Knowledge Management System
SiYuan: >= 0, < 3.7.4 (Fixed in: 3.7.4)

Mitigation Strategies

Upgrade SiYuan to v3.7.4 or later
Implement network-level segmentation to restrict API access
Restrict user creation and guest access on server-mode instances

Remediation Steps:

Verify the currently running version of the SiYuan kernel by inspecting the application logs or interface settings.
Download the latest stable release (v3.8.0 or newer) from the official repository.
Replace the old executable or container image with the updated version.
Restart the SiYuan service and monitor authentication logs for standard API requests.

References

Read the full report for CVE-2026-73607 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-73609: CVE-2026-73609: Missing Authorization in SiYuan Note getBookmarkLabels Endpoint

CVE Reports — Thu, 01 Oct 2026 20:30:31 +0000

CVE-2026-73609: Missing Authorization in SiYuan Note getBookmarkLabels Endpoint

Vulnerability ID: CVE-2026-73609
CVSS Score: 5.8
Published: 2026-10-01

An information disclosure vulnerability (CWE-862) in the SiYuan Note platform before version v3.7.4 allows anonymous or unprivileged readers to obtain a complete list of bookmark labels globally across all workspaces and notebooks by querying the /api/attr/getBookmarkLabels API endpoint.

TL;DR

Missing authorization checks on the /api/attr/getBookmarkLabels endpoint in SiYuan Note allow unauthenticated or unprivileged users to query and retrieve all bookmark labels across the entire workspace, exposing confidential project names, structures, and metadata.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-862
Attack Vector: Network
CVSS v3.1: 5.8
CVSS v4.0: 6.9
EPSS Score: 0.00325 (0.33%)
Exploit Status: Conceptual Proof of Concept

Affected Systems

SiYuan Note
SiYuan: < v3.7.4 (Fixed in: v3.7.4)

Code Analysis

Commit: 251596f

Enforce publish access controls for getBookmarkLabels

Exploit Details

VulnCheck: Information disclosure advisory highlighting the getBookmarkLabels endpoint vulnerability.

Mitigation Strategies

Upgrade SiYuan Note to version v3.7.4 or later
Bind Siyuan Note server strictly to localhost loopback interface (127.0.0.1)
Restrict endpoint access using Nginx or other reverse proxies to filter path /api/attr/getBookmarkLabels

Remediation Steps:

Identify the current running version of Siyuan Note.
Download the updated version (v3.7.4 or later) from the official GitHub repository.
Apply the update and restart the server.
Validate the fix by attempting an unauthenticated POST request to /api/attr/getBookmarkLabels.

References

Read the full report for CVE-2026-73609 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-76504: CVE-2026-76504: Unauthenticated Authentication Bypass in Cisco Catalyst SD-WAN Manager

CVE Reports — Thu, 01 Oct 2026 17:31:32 +0000

CVE-2026-76504: Unauthenticated Authentication Bypass in Cisco Catalyst SD-WAN Manager

Vulnerability ID: CVE-2026-76504
CVSS Score: 9.8
Published: 2026-09-30

CVE-2026-76504 is a critical vulnerability in the web-based management console of Cisco Catalyst SD-WAN Manager. Due to improper normalization and handling of hex/percent-encoded sequences (CWE-177) within incoming request URIs, remote, unauthenticated attackers can bypass administrative authentication controls. Successful exploitation permits full remote administrative command execution on the SD-WAN management plane, threatening the integrity and availability of the managed network fabric.

TL;DR

An unauthenticated remote authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager allows attackers to perform administrative actions with root-level privileges by exploiting inconsistency in URI hex/percent-encoding handling across web application layers.

⚠️ Exploit Status: ACTIVE

Technical Details

CWE ID: CWE-177 (Improper Handling of URL Encoding)
Attack Vector: Network (AV:N)
CVSS v3.1 Score: 9.8
Exploit Status: active
CISA KEV Listed: Yes (Added September 30, 2026)
Impact: Complete administrative compromise of SD-WAN management interface

Affected Systems

Cisco Catalyst SD-WAN Manager (formerly vManage)
Catalyst SD-WAN Manager: < 20.9.10.1 (Fixed in: 20.9.10.1)
Catalyst SD-WAN Manager: >= 20.12.0.0, < 20.12.8.2 (Fixed in: 20.12.8.2)
Catalyst SD-WAN Manager: >= 20.15.0.0, < 20.15.6.1 (Fixed in: 20.15.6.1)
Catalyst SD-WAN Manager: >= 20.18.0.0, < 20.18.4.1 (Fixed in: 20.18.4.1)
Catalyst SD-WAN Manager: >= 26.1.0.0, < 26.1.2.1 (Fixed in: 26.1.2.1)
Catalyst SD-WAN Manager: >= 26.2.0.0, < 26.2.1 (Fixed in: 26.2.1)

Exploit Details

ShadowForge Cyber PoC Repository: Exploit verification script and public vulnerability analysis framework detailing target analysis features and command-line execution structures.

Mitigation Strategies

De-expose Cisco Catalyst SD-WAN Manager management interfaces from the public internet.
Implement restrictive local network and firewall Access Control Lists (ACLs) to allow traffic only from designated, trusted administrative hosts.
Enforce authentication protocols at the network perimeter, such as requiring VPN or Multi-Factor authenticated jump servers to access administrative zones.

Remediation Steps:

Identify the current software generation of all deployed Catalyst SD-WAN Manager instances.
Cross-reference the running version against the fixed release matrix to determine the correct target firmware path.
Schedule emergency maintenance windows to deploy the updated software versions.
Verify that the web interface is inaccessible via paths containing double-escaped or percent-encoded traversal indicators.

References

Read the full report for CVE-2026-76504 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-73606: CVE-2026-73606: Authorization Bypass and Information Disclosure in SiYuan /api/block/getRefIDs Endpoint

CVE Reports — Thu, 01 Oct 2026 17:30:29 +0000

CVE-2026-73606: Authorization Bypass and Information Disclosure in SiYuan /api/block/getRefIDs Endpoint

Vulnerability ID: CVE-2026-73606
CVSS Score: 6.9
Published: 2026-10-01

An authorization bypass and information disclosure vulnerability in the SiYuan personal knowledge management system before version 3.7.4 allows unauthenticated attackers to query block relationship metadata from password-protected documents.

TL;DR

Unauthenticated API requests to /api/block/getRefIDs bypass password checks, leaking relationship hierarchies in SiYuan.

Technical Details

CWE ID: CWE-639
Attack Vector: Network (AV:N)
CVSS v4.0 Score: 6.9 (Medium)
EPSS Score: 0.00325 (Percentile: 23.20%)
Exploit Status: None (No public exploit)
CISA KEV Status: Not Listed
Affected Component: kernel/api/block.go (/api/block/getRefIDs)

Affected Systems

SiYuan personal knowledge management system
SiYuan: < 3.7.4 (Fixed in: 3.7.4)

Mitigation Strategies

Upgrade SiYuan kernel to v3.7.4 or later.
Disable anonymous publish mode if immediate upgrade is not feasible.
Enforce IP-level access controls to the SiYuan kernel api endpoint.

Remediation Steps:

Verify the currently deployed SiYuan version.
Update deployment configurations (Docker Compose, systemd, or native binaries) to reference v3.7.4 or later.
Test endpoint response behavior by issuing unauthenticated POST requests to /api/block/getRefIDs to confirm password-protected paths return filtered results.

References

Read the full report for CVE-2026-73606 on our website for more details including interactive diagrams and full exploit analysis.

CVE-2026-73605: CVE-2026-73605: Path Traversal and File Existence Oracle via getUniqueFilename Endpoint in SiYuan

CVE Reports — Thu, 01 Oct 2026 16:30:30 +0000

CVE-2026-73605: Path Traversal and File Existence Oracle via getUniqueFilename Endpoint in SiYuan

Vulnerability ID: CVE-2026-73605
CVSS Score: 6.9
Published: 2026-10-01

An authorization bypass and path traversal vulnerability exists in the SiYuan knowledge workspace platform. The vulnerability is located in the '/api/file/getUniqueFilename' endpoint inside the 'github.com/siyuan-note/siyuan/kernel' package. Under default configurations, this route is exposed to users who satisfy basic authentication middleware checks, which includes anonymous readers in publish mode. By supplying unvalidated absolute paths, remote attackers can verify the existence of files and directories across the host operating system, establishing a high-fidelity file existence oracle.

TL;DR

Unauthenticated remote users can verify the existence of files and folders on the host operating system by sending crafted path parameters to the SiYuan file utility endpoint, leading to sensitive host system information disclosure.

⚠️ Exploit Status: POC

Technical Details

CWE ID: CWE-862
Attack Vector: Network (AV:N)
CVSS v4.0 Base Score: 6.9
EPSS Score: 0.00325 (Percentile: 23.19%)
Impact: Filesystem structure reconnaissance
Exploit Status: Proof-of-Concept Available
KEV Status: Not Listed

Affected Systems

SiYuan personal knowledge management system
SiYuan: < 3.7.4 (Fixed in: 3.7.4)

Exploit Details

GitHub Security Advisory: Exploit methodology and vulnerability overview documented in the official advisory.

Mitigation Strategies

Upgrade SiYuan to version v3.7.4 or later
Restrict access to the SiYuan API via network access control lists
Disable anonymous publish mode if not strictly required

Remediation Steps:

Identify all active instances of SiYuan running versions prior to v3.7.4
Apply the v3.7.4 update from the official source
Verify that the /api/file/getUniqueFilename endpoint no longer accepts absolute paths outside the workspace

References

Read the full report for CVE-2026-73605 on our website for more details including interactive diagrams and full exploit analysis.