MEDIUMCVSS v3.1 5.3Vulnerability
CVE-2026-116205
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler. Attackers can pass the syntax in the content parameter of the page render handler to reach internal hosts and ports and read their responses.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-25T14:48:34.194958+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 5.3
- Retrieved at
- 2026-10-25T14:49:38+00:00
- Score
- 5.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-116205
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- First seen by Signal
- 2026-10-25T14:49:38+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Published at
- 2026-10-25T14:17:01.513
- Last modified
- 2026-10-25T14:17:01.643
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph