VULNERABILITY INTELLIGENCE
CVE-2026-116166
CVSS score6.8 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-10-25
Last modified2026-10-29
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port keeps serving full API access over plain HTTP alongside HTTPS. Network-adjacent attackers can sniff the cleartext login flow and session cookie, which lacks the Secure attribute while responses omit HSTS, to hijack kernel API sessions.
Weakness classification
- disclosure@vulncheck.com: CWE-319