Home › CVE Intelligence › CVE-2026-66012
CVSS 10.0 CRITICAL Vulnerability

CVE-2026-66012: CVE-2026-66012 - SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

CVE-2026-66012 SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

10.0CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-66012
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score10.0 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE-2026-66012 - SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-66012 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence