CVE-2026-74905: siyuan 0 to before 3.7.4

CVE-2026-74905. CVSS 3.1 base score 7.1 (HIGH, Vendor/CNA). EPSS 0.00351 (percentile 0.27493), scored 21-Oct-2026.

Affected technology

siyuan · 0 to before 3.7.4
siyuan-note

Description’s affected range: before v3.7.4

Component: Not specified by the source
Function: in

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source says when SafeMode is enabled, an authenticated attacker can bypass the SSRF guard via the network forward proxy, WebSocket proxy, or SSE proxy endpoints by supplying a URL whose hostname resolves to such a transition address, reaching internal services and cloud metadata endpoints (e.g., 169.254.169.254). Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and availability impact as none; integrity impact as low.

Published 23-Oct-2026 06:11 UTC

CWE: CWE-918
CCR priority: 28.5 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N · Vendor/CNA
EPSS: 0.00351 · percentile 0.27558 · 2026-10-22
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-23 06:11:59.600832+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-23 06:11:01.814928+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-74905.html