Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:32:35 +0000 CVE-2026-87807 — siyuan before v3.8.2 SQL Injection via fullTextSearchBlock https://cve.radiocsirt.org/vuln/cve-2026-87807 <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint&#39;s method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes.</p> <p><strong>Affected:</strong> siyuan-note siyuan</p> <p>siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint&#39;s method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes.</p> https://cve.radiocsirt.org/vuln/cve-2026-87807