CVE-2026-72803 in SiYuaninformazioni

Riassunto

di MITRE • 12/08/2026

SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoints. Attackers can retrieve block attributes including names, aliases, memos, and custom fields from protected documents by sending POST requests with block IDs.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

VulnCheck

Prenotare

10/08/2026

Divulgazione

12/08/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-72803
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72803
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-72803/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to know what is going to be exploited?

We predict KEV entries!