CVE-2026-116208 | YesWiki up to 4.6.x ActivityPub syncActorPosts authorization

October 25, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.x. It has been rated as problematic. This issue affects the function ActivityPubService::syncActorPosts of the component ActivityPub. This manipulation causes missing authorization.

This vulnerability is registered as CVE-2026-116208. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More