CVE-2026-104442GHSA-jwh5-j4f4-c6xp
YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action
YesWiki yeswiki
CVSS
6.9MediumExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 2 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 24% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 4.6.7yeswikiCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read back fetched feed content in the rendered page, and cause feed enclosures to be downloaded into the files directory.
Text from CVE List
Affected versions 2
- yeswikiaffected: all versions before 4.6.7CVE List
- yeswikiunaffected: 4.6.7CVE List