server.it

Domain

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

July 26, 2026

Last Seen

July 26, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Not enough context to determine if it's attacker-controlled.

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Critical Authorization Vulnerability in SiYuan (CVE-2026-66012)

Jul 26·2 sources

Related Articles (1)

MCP as a Backdoor: CVE-2026-66012 — How a Missing Authorization Check in SiYuan's MCP Endpoint Turns Anonymous Readers into Administrators HB - Tailored Software Solutions / 1h The vulnerability, disclosed via GitHub Security Advisory GHSA-cvhv-7xhj-xjp8 on July 13, 2026, chains three independent defects in SiYuan’s kernel into an unauthenticated, network-reachable path to arbitrary workspace file read/write/delete, plaintext credential exfiltration, and remote code execution via plugin planting

www.hunt-benito.com·Jul 26

Related Entities

Data Breach Zero-day Exploit SiYuan CVE-2026-66012 CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication Go T1041 - Exfiltration Over C2 Channel T1059 - Command and Scripting Interpreter T1068 - Exploitation for Privilege Escalation T1071 - Application Layer Protocol T1134 - Access Token Manipulation