CVE-2026-104464 | YesWiki up to 4.6.6 Bazar actor URL server-side request forgery

October 2, 2026 Yanac

A vulnerability marked as critical has been reported in YesWiki up to 4.6.6. This issue affects some unknown processing of the component Bazar. Performing a manipulation of the argument actor URL results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-104464. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More