VulnSocial

CVE-2026-68587General

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints that return rendered block DOM without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a heading block ID to read full rendered content of publish-disabled documents that should be restricted.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-04); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-04: 1Mentions · 2026-09-10: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-10: 109-0409-10
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-041
General1
2026-09-101
Disclosure1
Full discourse2 posts
  • SECNORA®@secnorainfosec
    Disclosure

    🚨 CVE-2026-68587: SiYuan’s “getHeading” Transaction Endpoints Leak Publish-Disabled Documents Even when an administrator explicitly marks a document as publish-disabled, an authorization gap allows unauthenticated users to read its content. Read more: https://secnora.com/blog/cve-2026-68587-siyuan-vulnerability/

    Post summary

    A new CVE (CVE-2026-68587) highlights an authorization gap in SiYuan’s getHeading endpoints that exposes publish‑disabled documents, with no mention of active exploitation, PoC, or patch.

    0000042
    76 followersView on X
  • DailyCVE@dailycve
    General

    🟠 SiYuan, Missing Publish-Access Check, #CVE-2026-68587 (Medium) -DC-Sep2026-2179 https://dailycve.com/siyuan-missing-publish-access-check-cve-2026-68587-medium-dc-sep2026-2179/

    Post summary

    A CVE (CVE-2026-68587) concerning a missing publish-access check in SiYuan is reported with medium severity. No proof‑of‑concept, exploit details, active exploitation evidence, or patch information are provided.

    0000033
    233 followersView on X

Explore more

Back to dashboard