What is CVE-2026-82652?

CVE-2026-82652 is a medium-severity vulnerability in Siyuan-Note Siyuan, classified under Exposure of Resource to Wrong Sphere. CVSS score: 5.3/10. Published 2026-08-30.

How severe is CVE-2026-82652?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Siyuan-Note Siyuan

CVE-2026-82652

SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking content unlisted.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Siyuan-note Siyuan

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-82652?: CVE-2026-82652 is a medium-severity vulnerability in Siyuan-Note Siyuan, classified under Exposure of Resource to Wrong Sphere. CVSS score: 5.3/10. Published 2026-08-30.
How severe is CVE-2026-82652?: Medium severity. CVSS v3 base score is 5.3 out of 10.