Security Advisory

CVE-2026-69083

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-03 13:20:39

Last updated 2026-08-03 14:42:13

Assigner VulnCheck

CVSS score not scored

State PUBLISHED

Description

SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

← Browse all CVEs View on cve.org ↗