CVE-2026-104445 | YesWiki up to 4.6.6 ActivityPub Inbox improper authentication

October 2, 2026 Yanac

A vulnerability has been found in YesWiki up to 4.6.6 and classified as critical. This issue affects some unknown processing of the component ActivityPub Inbox. The manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-104445. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More