{"vulnerability": "cve-2026-8223", "sightings": [{"uuid": "48e5354f-41a0-446b-b1e0-d49951d96afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82234", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117173729593535791", "content": "CVE-2026-82234 - High-severity SSRF in SiYuan via DNS rebinding, exposing internal services and cloud metadata. CVSS 8.2. Update to v3.8.1 immediately. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-82234/", "creation_timestamp": "2026-08-28T15:00:47.341268Z"}, {"uuid": "3848e25d-ba10-40fd-8ea2-7f34859b8fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu5mv5jpa62o", "content": "CVE-2026-82234 - High-severity SSRF in SiYuan via DNS rebinding, exposing internal services and cloud metadata. CVSS 8.2. Update to v3.8.1 immediately. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-82234/", "creation_timestamp": "2026-08-28T15:00:59.405030Z"}, {"uuid": "9bcff7f0-d152-424a-8ceb-f52e7bb58ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvixscglb42r", "content": "CVE-2026-82232 - apache syncope\nIf an administrator with sufficient rights uses the task\u2011search feature, they can insert specially crafted sorting instructions that cause the system to execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-14T20:40:08.740910Z"}, {"uuid": "ac0bef30-019f-4cdf-9596-38c7e4bb9c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82232", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvlzoqf5mp2q", "content": "Six Apache Syncope vulnerabilities, including CVE-2026-82232, expose severe identity management flaws. Patch your Apache Syncope servers immediately.\n\n#ApacheSyncope #IdentityManagement #CVE202682232 #Cybersecurity #Vulnerability", "creation_timestamp": "2026-09-16T01:51:56.112350Z"}, {"uuid": "3eb7778c-e8d0-4651-a9c9-58daf972efdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82232", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvn6j2cosu2z", "content": "Apache Syncope\u306e\u8106\u5f31\u6027\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3084JWT\u30c8\u30fc\u30af\u30f3\u4e57\u3063\u53d6\u308a\u3001\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3092\u8a31\u3059\u6050\u308c\n\nApache Syncope\u306f\u3001\u7279\u6a29\u3092\u6301\u3064\u7ba1\u7406\u8005\u304c\u4efb\u610f\u306eSQL\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u305f\u308a\u3001Groovy\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u306e\u4fdd\u8b77\u3092\u56de\u907f\u3057\u3066\u30b3\u30fc\u30c9\u3092\u6ce8\u5165\u3057\u305f\u308a\u3001\u9732\u51fa\u3057\u305fJWT\u30a2\u30af\u30bb\u30b9\u30c8\u30fc\u30af\u30f3\u3092\u901a\u3058\u3066\u3088\u308a\u9ad8\u3044\u6a29\u9650\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u4e57\u3063\u53d6\u3063\u305f\u308a\u3067\u304d\u308b\u30013\u4ef6\u306e\u91cd\u8981\u306a\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002 CVE-2026-82232\u3001CVE-2", "creation_timestamp": "2026-09-16T12:50:53.683637Z"}, {"uuid": "bbae5394-92e2-41e4-aadc-7f6f6cdb7e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82234", "type": "seen", "source": "https://gist.github.com/alon710/3b93c71b8850dae930d083d5024e2872", "content": "# GHSA-X8GV-G2G3-65FJ: CVE-2026-82234: Server-Side Request Forgery via DNS-Rebinding TOCTOU in SiYuan Kernel\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-10-02\n> **Full Report:** https://cvereports.com/reports/GHSA-X8GV-G2G3-65FJ\n\n## Summary\nAn Server-Side Request Forgery (SSRF) vulnerability via DNS-Rebinding Time-of-Check to Time-of-Use (TOCTOU) has been discovered in SiYuan (\u601d\u6e90\u7b14\u8bb0), an open-source personal knowledge management system. The flaw exists within the AI Agent tools http_request (util.HTTPRequest) and web_fetch (util.WebFetch) of the SiYuan Kernel, allowing unauthenticated remote attackers to bypass SSRF validation and access private internal services or cloud metadata endpoints.\n\n## TL;DR\nA DNS-rebinding SSRF vulnerability in the SiYuan Kernel AI Agent tools allows remote attackers to bypass private IP validation and access internal networks or cloud metadata by exploiting a Time-of-Check to Time-of-Use (TOCTOU) window in DNS resolution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.2 (High)\n- **EPSS Score**: 0.00362 (Percentile: 27.74%)\n- **Impact**: Confidentiality: High, Scope: Changed\n- **Exploit Status**: Proof of Concept (PoC) verified\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan (\u601d\u6e90\u7b14\u8bb0) Kernel\n- **SiYuan**: <= 3.8.0 (Fixed in: `3.8.1`)\n\n## Mitigation\n\n- Upgrade SiYuan Kernel to version 3.8.1 or above to enforce connection-level IP validation.\n- Configure local firewall rules to block outbound TCP traffic to loopback interfaces and link-local cloud metadata endpoints.\n- Deploy internal DNS resolution filtering (e.g., DNSMASQ or firewall-level DNS inspection) to discard responses returning private IP spaces for external domains.\n\n**Remediation Steps:**\n1. Navigate to the SiYuan installation or deployment manager and initiate a check for updates.\n2. Install version 3.8.1 of the SiYuan application, ensuring the service is restarted.\n3. Verify that the AI tools http_request and web_fetch are functioning properly on public sites while blocking local network queries.\n\n## References\n\n- [GHSA Advisory Database Entry](https://github.com/advisories/GHSA-X8GV-G2G3-65FJ)\n- [SiYuan Security Advisory](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-x8gv-g2g3-65fj)\n- [VulnCheck Technical Advisory](https://www.vulncheck.com/advisories/siyuan-before-3.8.1-ssrf-via-dns-rebinding-toctou)\n- [OSV Entry for GHSA-x8gv-g2g3-65fj](https://osv.dev/vulnerability/GHSA-x8gv-g2g3-65fj)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-82234)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-X8GV-G2G3-65FJ) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-03T01:30:31.000000Z"}]}