CVE-2026-69083

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

August 3, 2026

Last Seen

August 4, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability Discovered in SiYuan Software72.0

A critical SQL injection vulnerability, designated CVE-2026-69083, has been identified in SiYuan versions prior to v3.7.3. This flaw affects the fullTextSearchAssetContent endpoint, allowing unauthenticated users and those with publish RoleReader tokens to execute arbitrary SQL commands. Attackers c...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical SQL Injection Vulnerability Discovered in SiYuan Software

Aug 3·4 sources

Related Articles (5)

CVE-2026-69083 AKAOMA CVE VULNERABILITIES / 22h SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

cve.akaoma.com·Aug 4

CVE-2026-69083: SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent [CRITICAL] Exploit Intelligence — CVEs with Exploits / 12h This exploit demonstrates an unauthenticated SQL injection vulnerability (CVE-2026-69083) in SiYuan < 3.7.3 via the `/api/search/fullTextSearchAssetContent` endpoint. SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens.

exploit-intel.com·Aug 4

CVE-2026-69083 National Vulnerability Database / 9h SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

nvd.nist.gov·Aug 4

CVE-2026-69083 CVE Vulnerability Disclosures / 4h SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

cve.report·Aug 3

CVE-2026-69083 - Exploits & Severity

Related Entities

Sql Injection SiYuan Cwe-89 - SQL Injection T1190 - Exploit Public-Facing Application SQLite