https://vulnerability.circl.lu/sightings/feed 2026-09-10T21:09:32.613645+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ef1305cf-5de8-4fe4-9d47-0927a0df04e7/export 2026-09-10T21:09:32.637877+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ef1305cf-5de8-4fe4-9d47-0927a0df04e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72792", "type": "seen", "source": "https://gist.github.com/alon710/90178cd17fc0b9e9f8bf4b855dea8ff1", "content": "# CVE-2026-72792: CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72792\n\n## Summary\nSiYuan before version v3.7.4 is affected by an information disclosure vulnerability in the `/api/tag/getTag` endpoint. Under publish mode, this endpoint returns tag labels and occurrence counts from password-protected documents to unauthenticated readers, allowing them to enumerate protected vocabulary and internal metadata without providing the document's publish password.\n\n## TL;DR\nUnauthenticated remote attackers can query `/api/tag/getTag` in SiYuan instances running in publish mode to extract tag vocabulary and metadata from password-protected documents.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-863\n- **Attack Vector**: Network\n- **CVSS Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00237 (Percentile: 14.53%)\n- **Impact**: Information Disclosure (Metadata Leakage)\n- **Exploit Status**: PoC available\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- SiYuan personal knowledge management system\n- **SiYuan**: < 3.7.4 (Fixed in: `3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan to version v3.7.4 or later\n- Implement reverse proxy blocking rules for `/api/tag/getTag` if upgrades are not feasible\n- Enforce strong, complex passwords for protected documents to prevent offline brute-force cookie creation\n\n**Remediation Steps:**\n1. Identify all public or published SiYuan instances running versions prior to v3.7.4\n2. Deploy the update to v3.7.4 or newer immediately\n3. If immediate patching is unavailable, block the path `/api/tag/getTag` using Nginx or an equivalent web server config\n4. Audit and rotate critical document passwords to ensure high-entropy values are in use\n\n## References\n\n- [GitHub Security Advisory GHSA-mp7r-57w4-5qm3](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mp7r-57w4-5qm3)\n- [SiYuan Fix Commit 4515fa257cfae2db0a43844c61de8ef1ac853796](https://github.com/siyuan-note/siyuan/commit/4515fa257cfae2db0a43844c61de8ef1ac853796)\n- [VulnCheck Advisory for SiYuan](https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-tag-api)\n- [CVE-2026-72792 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-72792)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72792) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-05T04:31:40.416871Z"} 2026-09-05T04:31:40.416871+00:00 https://vulnerability.circl.lu/sighting/97b00419-e9a0-445c-aa10-db6c436c6939/export 2026-09-10T21:09:32.639949+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "97b00419-e9a0-445c-aa10-db6c436c6939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72792", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-mp7r-57w4-5qm3", "content": "", "creation_timestamp": "2026-09-04T22:35:03.485719Z"} 2026-09-04T22:35:03.485719+00:00