CVE-2026-87808 | SiYuan Note up to 3.8.1 SQL Execution fullTextSearchBlock method privileges management

September 9, 2026 Yanac

A vulnerability has been found in SiYuan Note SiYuan up to 3.8.1 and classified as problematic. This impacts the function model.CheckReadonly/model.CheckReadonlyStatementInBox of the file /api/search/fullTextSearchBlock of the component SQL Execution. The manipulation of the argument method leads to improper privilege management.

This vulnerability is listed as CVE-2026-87808. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More