CVE-2026-104463 | YesWiki up to 4.6.6 Actor Inbox server-side request forgery

October 2, 2026 Yanac

A vulnerability described as critical has been identified in YesWiki up to 4.6.6. Impacted is an unknown function of the component Actor Inbox. Executing a manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-104463. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More