CVE-2026-68586

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyhkwq72o...

CVE-2026-68586 SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc

SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints /api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc. While the corresponding backlink list endpoints filter publish-forbidden documents, the content endpoints gated only by...