| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-104460 | YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch | YesWiki | yeswiki | High | 7.5 | 2026-10-02 11:38:29 | Deep Dive |
| CVE-2026-104459 | YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle | YesWiki | yeswiki | Medium | 6.5 | 2026-10-02 11:38:28 | Deep Dive |
| CVE-2026-104458 | YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses | YesWiki | yeswiki | Medium | 6.5 | 2026-10-02 11:38:28 | Deep Dive |
| CVE-2026-104457 | YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter | YesWiki | yeswiki | High | 8.6 | 2026-10-02 11:38:27 | Deep Dive |
| CVE-2026-104456 | YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username | YesWiki | yeswiki | High | 7.6 | 2026-10-02 11:38:26 | Deep Dive |
| CVE-2026-104455 | YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action | YesWiki | yeswiki | Medium | 5.3 | 2026-10-02 11:38:26 | Deep Dive |
| CVE-2026-104454 | YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint | YesWiki | yeswiki | Medium | 5.3 | 2026-10-02 11:38:25 | Deep Dive |
| CVE-2026-104452 | YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler | YesWiki | yeswiki | Medium | 5.4 | 2026-10-02 11:38:24 | Deep Dive |
| CVE-2026-104453 | YesWiki before 4.6.7 CSRF Tag Deletion via admintag Action | YesWiki | yeswiki | Medium | 5.4 | 2026-10-02 11:38:24 | Deep Dive |
| CVE-2026-104451 | YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler | YesWiki | yeswiki | Medium | 4.3 | 2026-10-02 11:38:23 | Deep Dive |
| CVE-2026-104450 | YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action | YesWiki | yeswiki | Medium | 6.5 | 2026-10-02 11:38:22 | Deep Dive |
| CVE-2026-104449 | YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche | YesWiki | yeswiki | Medium | 6.5 | 2026-10-02 11:38:22 | Deep Dive |
| CVE-2026-104448 | YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler | YesWiki | yeswiki | High | 8.1 | 2026-10-02 11:38:21 | Deep Dive |
| CVE-2026-104446 | YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler | YesWiki | yeswiki | Medium | 6.5 | 2026-10-02 11:38:20 | Deep Dive |
| CVE-2026-104447 | YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction | YesWiki | yeswiki | High | 7.1 | 2026-10-02 11:38:20 | Deep Dive |
| CVE-2026-104445 | YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing | YesWiki | yeswiki | High | 8.2 | 2026-10-02 11:38:19 | Deep Dive |
| CVE-2026-104443 | YesWiki before 4.6.7 Scope Bypass via Triples Delete API | YesWiki | yeswiki | High | 8.1 | 2026-10-02 11:38:18 | Deep Dive |
| CVE-2026-104444 | YesWiki before 4.6.7 Authorization Bypass via Comments API editComment | YesWiki | yeswiki | High | 7.1 | 2026-10-02 11:38:18 | Deep Dive |
| CVE-2026-104442 | YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action | YesWiki | yeswiki | Medium | 5.8 | 2026-10-02 11:38:17 | Deep Dive |
| CVE-2026-86535 | Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely | Apache Software Foundation | Apache Thrift | High | 8.7 | 2026-10-02 11:38:17 | Deep Dive |