CVE-2026-72812 | SiYuan-Note SiYuan up to 3.7.3 Backlink Endpoint /api/ref/refreshBacklink improper authorization

A vulnerability was found in SiYuan-Note SiYuan up to 3.7.3. It has been classified as critical. The affected element is an unknown function of the file /api/ref/refreshBacklink of the component Backlink Endpoint. This manipulation causes improper authorization.

The identification of this vulnerability is CVE-2026-72812. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More