CVE-2026-116170 | siyuan-note SiYuan up to 3.8.6 History Endpoint history.db op/type sql injection

October 25, 2026 Yanac

A vulnerability has been found in siyuan-note SiYuan up to 3.8.6 and classified as problematic. Impacted is an unknown function of the file history.db of the component History Endpoint. The manipulation of the argument op/type leads to sql injection.

This vulnerability is listed as CVE-2026-116170. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More