CVE-2026-72792

creationtimestamp| type| source ---|---|--- 2026-09-04 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-mp7r-57w4-5qm3 2026-09-05 04:31:40+00:00| seen| https://gist.github.com/alon710/90178cd17fc0b9e9f8bf4b855dea8ff1...

CVE-2026-72792

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag labels and occurrence counts from password-protected documents to unauthenticated readers. Attackers can enumerate tag vocabulary and internal terminology from password-protected...