CVE-2026-104456 | YesWiki up to 4.6.6 Acl Service updateRequestWithACL sql injection

October 2, 2026 Yanac

A vulnerability described as critical has been identified in YesWiki up to 4.6.6. This affects the function AclService::updateRequestWithACL of the component Acl Service. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-104456. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More