Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can request published databases that relate to restricted databases to retrieve sensitive content, or bypass row filtering entirely when the first column is a non-block type.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-13 | 1 | Patch1 |
| 2026-09-05 | 1 | Disclosure1 |
🟠 Anytype, Publish Filter Row-Access Bypass, #CVE-2026-72798 (Medium) -DC-Sep2026-2217 https://dailycve.com/anytype-publish-filter-row-access-bypass-cve-2026-72798-medium-dc-sep2026-2217/
Post summary
A new CVE‐2026‐72798 vulnerability in Anytype—a publish filter row‑access bypass—is disclosed with medium severity on DailyCVE. No PoC or exploit details are provided.
CVE-2026-72798 - High severity info disclosure in SiYuan. Unpatched v3.7.4 lets anonymous readers access hidden database content via related-database bypass. CVSS 8.6. Update immediately. #CVE #SiYuan #infosec https://www.valtersit.com/cve/CVE-2026-72798/ #infosec #CVE #infosec #SysAdmin #cybersecurity #Linux #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta
Post summary
High‑severity info disclosure in SiYuan v3.7.4 allows anonymous readers to access hidden database content via a related‑database bypass; users are urged to apply updates immediately.