https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T16:32:00.687122+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-104467 fkie_cve-2026-104467 2026-10-04T16:32:00.714331+00:00

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenticated attackers to call admin-only API routes when public API mode is enabled. Attackers can send requests to endpoints like api/ci/update_config and api/archives to overwrite configuration and list, download, or delete backup archives.

 https://db.gcve.eu/vuln/ghsa-59xh-vh54-x5hf GHSA-59xh-vh54-x5hf 2026-10-04T16:32:00.714434+00:00

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenticated attackers to call admin-only API routes when public API mode is enabled. Attackers can send requests to endpoints like api/ci/update_config and api/archives to overwrite configuration and list, download, or delete backup archives.