CVE-2026-43937

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:06+00:00| seen| https://t.me/shimiscyberworld/1424 2026-09-13 00:00:54+00:00| seen| https://t.me/shimiscyberworld/1424...

CVE-2026-43937

YetAnotherForum.NET YAF.NET is a C ASP.NET forum. Prior to 4.0.5, Any admin OnPost… handler executes its side effects before the ResultFilterAttribute rewrites the response to a 302 to /Info/4. The most impactful abuse is /Admin/RunSql, whose OnPostRunQuery binds Editor from the POST body and...