NVD CRITICAL: CVE-2026-69083 — SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullT...

Monday, August 3, 2026 at 02:16 PM UTC·Source: NIST NVD

Updated: Monday, August 3, 2026 at 03:00 PM UTC

Executive Summary

SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-69083

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 3, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

CFTC fines UBS $8 million for AML failures

The Commodity Futures Trading Commission today announced an order filing and settling charges against UBS Financial Services Inc., a registered futures commission merchant, for failing to diligently supervise the configuration and operation of its anti-money laundering transaction monitoring systems for wire transfers denominated in foreign currencies (FX).

25m agoFinextra

MEDIUMVulnerabilityNEW

Mastercard closes acquisition of BVNK

Mastercard (NYSE: MA) today completed its acquisition of BVNK, expanding the company’s strategy to support greater choice in how people and businesses exchange value by enabling interoperability across fiat and digital currencies.

27m agoFinextra

CRITICALVulnerabilityNEW

China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day

Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure

37m agoInfosecurity Magazine