CVE-2026-68586

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyhkwq72o 2026-09-03 22:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-36v8-mpjm-8j5r 2026-09-04 14:31:53+00:00| seen|...

CVE-2026-68586 SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc

SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints /api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc. While the corresponding backlink list endpoints filter publish-forbidden documents, the content endpoints gated only by...