cyfenced.com →

[ CVE-2026-116207 · Published 25 Oct 2026 ]

Vulnerability in yeswiki

CVSS 9.1 EPSS <1%No fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.1

[ Description ]Official description

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escaped only with mysqli_real_escape_string. Attackers can supply a backtick to inject subqueries, reading data such as user password hashes or exhausting database threads with SLEEP().

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References