siyuan-note vendor intelligence

siyuan-note Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting siyuan-note products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse siyuan-note KEVs Full KEV feed

1
Total KEVs: 0
In CISA KEV: 1
Beyond CISA KEV: 1
Sensor Observed

The catalog gap matters for siyuan-note exposure

One of the one exploited siyuan-note CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA: 100%
Beyond CISA: 1
Product families

Attested siyuan-note CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEVIntel tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)	siyuan	Confirmed	Beyond CISA	04 Aug 2026

Showing 1 of 1 siyuan-note known exploited vulnerabilities.

Recurring weakness patterns

Initialization, limitation, and relative path traversal account for three mapped occurrences across this siyuan-note KEV portfolio.

Browse all KEVs →

CWE-1188

Initialization of a Resource with an Insecure Default

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-23

Relative Path Traversal

Email Alerts

Get High-Impact KEV Alerts by Email

KEVIntel tracks known exploited vulnerabilities beyond CISA KEV. Subscribe for occasional, curator-picked alerts when exploitation warrants attention. For every update, use the RSS feed or API.