CVE-2026-104449 | YesWiki up to 4.6.6 Bazar BazaR id_fiche access control

October 2, 2026 Yanac

A vulnerability categorized as critical has been discovered in YesWiki up to 4.6.6. This impacts an unknown function of the file BazaR of the component Bazar. Executing a manipulation of the argument id_fiche can lead to improper access controls.

This vulnerability is tracked as CVE-2026-104449. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More