CVE-2026-69084Proof of concept (PoC) published · CISASuited to automated attack · CISA
SiYuan before v3.7.3 SQL Injection via searchEmbedBlock
CVSS score
9.9
EPSS probability
%1.6
Risk score
0.2
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2026-69084/69085 — SiYuan arbitrary SQL execution via searchEmbedBlock + searchDocs SQLi (CVSS 9.9). Verified on v3.7.2, rejected on v3.7.3.
Makefile Go / Python
Nuclei: SiYuan - SQL Execution
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-60004 Actively exploited
Code injection in Gitea
G
Patch verified Public Exploits:16EPSS %24
8.6
CVE-2026-76819
CVE-2026-76819
G
Patch status unknown
8.5
CVE-2026-59185
Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
G
Patch verified
7.8
CVE-2026-59172
Joker linter executed project-local .jokerd/linter.* files during linting
G
Patch verified
7.5
CVE-2026-100353
kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
G
Patch status unknown
7.5
CVE-2026-100354
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash
G
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-69084"