https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:15:30.946681+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-72789 CVE-2026-72789 — SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks 2026-09-29T15:15:33.494910+00:00

Affected: siyuan-note siyuan

SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retrieve fully decrypted document content from unlocked encrypted notebooks through the publish API without authentication or key material.