CVE-2026-72797

creationtimestamp| type| source ---|---|--- 2026-09-04 22:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f2rw-w22v-54vh 2026-09-05 08:31:47+00:00| seen| https://gist.github.com/alon710/9a2d85ba8ea8d9357fd9b222ff82f01a...

CVE-2026-72797

SiYuan prior to v3.7.4 contains an information-disclosure vulnerability in the getEncryptedNotebookStatus endpoint. The endpoint returns encrypted notebook identifiers, names, and lock states without publish-access filtering, allowing anonymous readers and publish-mode accounts to enumerate all e...