EUVD-2026-110528

YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SQL LIKE patterns without escaping the and % wildcards. Self-registered attackers can use usernames such as or %%% that over-match ACL tokens, reading pages and Bazar entries...

EUVD-2026-110527

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL...

CVE-2026-116821

YesWiki versions prior to 4.7.0 are vulnerable to a read-ACL bypass in the AclService::updateRequestWithACL function. The root cause is the failure to escape _ and % wildcards when interpolating usernames into SQL LIKE patterns . An attacker with self-registration capabilities can use specific us...

CVE-2026-116820

Versions of YesWiki from 4.6.0 before 4.7.0 are vulnerable to an information disclosure vulnerability. An unauthenticated attacker can append the showreq parameter to public Bazar listing API requests to view assembled SQL queries. This disclosure provides sensitive data, including table names , ...