CVE lookup

CVE-2026-66012

Pruva has a verified reproduction for CVE-2026-66012: SiYuan missing authorization in /mcp enables unauthenticated administrator takeover via Publish proxy. The canonical evidence record is REPRO-2026-00305.

REPRO

REPRO-2026-00305

Package

siyuan · github

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents NVD source