CVE-2026-116826 | YesWiki up to 4.6.x DuplicationManager /api/pages downloadFile files server-side request forgery

October 27, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.x. It has been rated as problematic. Affected by this issue is the function DuplicationManager::downloadFile of the file /api/pages of the component DuplicationManager. This manipulation of the argument files causes server-side request forgery.

This vulnerability is handled as CVE-2026-116826. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More