THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82652 (MEDIUM 5.3) — SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking conte

[NVD] CVE-2026-82652 (MEDIUM 5.3) — SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking conte

mednvdPublished 2026-08-30

CVE-2026-82652 CVSS: 5.3 MEDIUM Published: 2026-08-30T15:16:45.900

SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking content unlisted.

Indicators of compromise

CVE-2026-82652cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82652