Back to the CVE list

CVE-2026-46670Proof of concept (PoC) published · CISASuited to automated attack · CISA

YesWiki: Unauthenticated SQL Injection

CVSS score

9.8

EPSS probability

%2.0

Risk score

0.2

Published

2 mo ago

Overview Public Exploits (1)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.1

CVE-2026-52766YesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action

Vendoryeswiki Productyeswiki+2 etkilenen

Patch verifiedEPSS %11 mo ago

8.8

CVE-2026-104445YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing

Vendoryeswiki Productyeswiki

Patch status unknownEPSS %017 d ago

9.2

CVE-2026-104467YesWiki before 4.6.7 Authorization Bypass via Public API Mode

Vendoryeswiki Productyeswiki

Patch status unknownEPSS %017 d ago

8.7

CVE-2026-104460YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch

Vendoryeswiki Productyeswiki

Patch status unknownEPSS %017 d ago

8.6

CVE-2026-104471YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import

Vendoryeswiki Productyeswiki

Patch status unknownEPSS %017 d ago

8.7

CVE-2026-104472YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler

Vendoryeswiki Productyeswiki

Patch status unknownEPSS %017 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-46670"