CVE-2026-73045
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 15, 2026
Vendor
unknown
Description
SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit unbounded password guesses without rate limiting or CAPTCHA to gain access to password-protected published notebooks.