CVE-2026-52766 | YesWiki up to 4.6.5 EraseSpamedCommentsAction.php suppr improper authorization

September 5, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.5. It has been rated as problematic. This affects an unknown part of the file actions/EraseSpamedCommentsAction.php. The manipulation of the argument suppr leads to improper authorization.

This vulnerability is listed as CVE-2026-52766. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More