Skip to content

CVE-2026-56397

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
June 22, 2026
Last Seen
June 22, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in SiYuan Bazaar Exposes Users to Malicious Packages72.8

SiYuan disclosed CVE-2026-56395, a critical remote code execution vulnerability affecting versions before 3.6.1. The flaw arises from improper sanitization of Bazaar marketplace package metadata, allowing malicious authors to inject HTML and JavaScript. This can lead to cross-site scripting and, due...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cwe-79 - Cross-site Scripting (xss)ElectronXSS