Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler. Attackers can pass the syntax in the content parameter of the page render handler to reach internal hosts and ports and read their responses.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨 CVE-2026-116205 - high 🚨 YesWiki < 4.7.0 - Unauthenticated Server-Side Request Forgery > YesWiki < 4.7.0 contains an unauthenticated server-side request forgery caused by imp... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-116205 @pdnuclei #NucleiTemplates #cve