Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-32767

32
FAUCET Score

CVE-2026-32767 is a critical authorization bypass and SQL injection vulnerability affecting SiYuan personal knowledge management systems versions 3.6.0 and below. This flaw allows any authenticated user, including those with a Reader role, to execute arbitrary SQL commands against the application's database via the /api/search/fullTextSearchBlock endpoint. Rated 9.8 Critical (CVSS:3.1/AV:N/AC:L), it can lead to full compromise of data confidentiality, integrity, and availability by bypassing intended security controls. Although no public exploits or active exploitation are currently reported, the vulnerability is easily exploitable over the network with low attack complexity. Users should upgrade to SiYuan version 3.6.1 or later immediately to mitigate this risk.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.6.1CPE matchmatch criteria
cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.54%
Probability of exploitation in next 30 days
EPSS Percentile
42.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0054 is in the 22nd percentile among its peer group of 36,862 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference
View patch

Vendor Advisories (1)

goGHSA-j7wh-x834-p3r7critical

SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API

Mar 16, 2026

References

github.com / siyuan-note/siyuan/commit/d5e2d0bce0dffef5f61bd8066954bc2d41181fc5
Patch
github.com / siyuan-note/siyuan/issues/17209
Issue Tracking
github.com / siyuan-note/siyuan/releases/tag/v3.6.1
Release Notes
github.com / siyuan-note/siyuan/security/advisories/GHSA-j7wh-x834-p3r7
ExploitMitigationVendor Advisory