Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9c1q-rj71-q7b2
Vulnerability ID VCID-9c1q-rj71-q7b2
Aliases CVE-2026-34449
GHSA-68p4-j234-43mv
Summary
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-942 Permissive Cross-domain Policy with Untrusted Domains
System Score Found at
epss 0.00236 https://api.first.org/data/v1/epss?cve=CVE-2026-34449
epss 0.00236 https://api.first.org/data/v1/epss?cve=CVE-2026-34449
epss 0.00236 https://api.first.org/data/v1/epss?cve=CVE-2026-34449
cvssv3.1 9.6 https://github.com/siyuan-note/siyuan
generic_textual CRITICAL https://github.com/siyuan-note/siyuan
cvssv3.1 9.6 https://github.com/siyuan-note/siyuan/issues/17246
generic_textual CRITICAL https://github.com/siyuan-note/siyuan/issues/17246
cvssv3.1 9.6 https://github.com/siyuan-note/siyuan/releases/tag/v3.6.2
generic_textual CRITICAL https://github.com/siyuan-note/siyuan/releases/tag/v3.6.2
cvssv3.1 9.6 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-68p4-j234-43mv
generic_textual CRITICAL https://github.com/siyuan-note/siyuan/security/advisories/GHSA-68p4-j234-43mv
cvssv3.1 9.6 https://nvd.nist.gov/vuln/detail/CVE-2026-34449
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2026-34449
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-34449
https://github.com/siyuan-note/siyuan
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-68p4-j234-43mv
https://nvd.nist.gov/vuln/detail/CVE-2026-34449
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://github.com/siyuan-note/siyuan
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://github.com/siyuan-note/siyuan/issues/17246
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://github.com/siyuan-note/siyuan/releases/tag/v3.6.2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-68p4-j234-43mv
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2026-34449
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.46784
EPSS Score 0.00236
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T02:45:10.521558+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0