CVE-2026-116827 | YesWiki up to 4.6.x Bazar copyUrlToLocalFile server-side request forgery

October 27, 2026 Yanac

A vulnerability was found in YesWiki up to 4.6.x. It has been declared as problematic. Affected by this vulnerability is the function copyUrlToLocalFile of the component Bazar. The manipulation results in server-side request forgery.

This vulnerability is known as CVE-2026-116827. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More