Live › vulnerability › CVE-2026-116205
Go to dashboardYesWiki versions before 4.7.0 let an unauthenticated remote user send wiki link syntax to the page render handler so the server fetches arbitrary URLs. An attacker can use this to reach internal hosts and ports and read the responses.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Any YesWiki instance below 4.7.0 that is reachable over the network is exposed, since the flaw needs no login and only the render handler. Instances on a private network with no route to internal services carry less risk, but the sources do not say which configurations are safe beyond the version.
No product ranges from the sources yet.
unknown if the sources do not name the file.4.7.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler. Attackers can pass the syntax in the content parameter of the page render handler to reach internal hosts and ports and read their responses.
This page as .md · .json · in your agent: get_signal("CVE-2026-116205")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.