Is CVE-2026-103763 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103763?

CVE-2026-103763 has a CVSS v3 severity of MEDIUM (5.8).

Back

CVE-2026-103763

Description

SiYuan before v3.8.5 contains an information disclosure vulnerability that allows read-only publish readers to learn metadata of publish-excluded documents through the getNotebookInfo endpoint. Attackers, including anonymous visitors when no reader password is set, can query publish-visible notebooks to obtain document count, size and modification timestamps of hidden documents.