EUVD-2026-110533

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile that allows authenticated administrators to make arbitrary outbound requests via the files array. Attackers can POST file:// or internal URLs to /api/pages/tag/duplicate, storing local...

CVE-2026-116826

YesWiki versions before 4.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) in the DuplicationManager::downloadFile() function. Authenticated administrators can exploit this by sending a POST request to /api/pages/{tag}/duplicate using the files array. This allows the attacker to force t...