CVE-2026-104459 | YesWiki up to 4.6.6 WebfingerService actor_handle server-side request forgery

October 2, 2026 Yanac

A vulnerability has been found in YesWiki up to 4.6.6 and classified as critical. The impacted element is the function WebfingerService. This manipulation of the argument actor_handle causes server-side request forgery.

This vulnerability is handled as CVE-2026-104459. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More