CVE-2026-104470 | YesWiki up to 4.6.6 Bazar valeur action url server-side request forgery

October 2, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.6. It has been rated as critical. This vulnerability affects unknown code of the component Bazar valeur action. This manipulation of the argument url causes server-side request forgery.

The identification of this vulnerability is CVE-2026-104470. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More