Security Advisory

CVE-2026-86192

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-05 12:09:06

Last updated 2026-09-05 12:09:06

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.

← Browse all CVEs View on cve.org ↗