https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T19:43:45.111213+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-104467 CVE-2026-104467 — YesWiki before 4.6.7 Authorization Bypass via Public API Mode 2026-10-04T19:43:45.112302+00:00

Affected: yeswiki

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenticated attackers to call admin-only API routes when public API mode is enabled. Attackers can send requests to endpoints like api/ci/update_config and api/archives to overwrite configuration and list, download, or delete backup archives.