CVE-2026-101092Proof of concept (PoC) published · CISASuited to automated attack · CISA
SiYuan before v3.8.4 Information Disclosure via getCurrentAttrViewImages
CVSS score
6.9
EPSS probability
%0.2
Risk score
0.0
Published
14 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.1
CVE-2026-109310
SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon Template
S
Patch status unknown
6.9
CVE-2026-109309
SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path
S
Patch verified
9.9
CVE-2026-69084
SiYuan before v3.7.3 SQL Injection via searchEmbedBlock
S
Patch status unknownEPSS %2
9.9
CVE-2026-69085
SiYuan before v3.7.3 SQL Injection via searchDocs
S
Patch status unknownEPSS %1
9.4
CVE-2026-77086
SiYuan before v3.7.4 Path Traversal via packageName
S
Patch status unknownEPSS %1
10.0
CVE-2026-66012
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
S
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-101092"