Tag

Cve-2026-69086

1 brief RSS

SQL Injection in SiYuan fullTextSearchAssetContent Endpoint

SiYuan versions before 3.7.3 contain a critical SQL injection vulnerability in the fullTextSearchAssetContent endpoint, allowing unauthenticated attackers to execute arbitrary SQL commands on the backend asset-content database.

SiYuan sql-injection web-vulnerability path-traversal cve-2026-69086 web-application

3r 2t 1c 1h ago