CVE ID :CVE-2026-116207 Published : Oct. 25, 2026, 1:20 p.m. | 1 hour, 2 minutes ago Description :YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field names from the query and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-116207 - YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API

VERWANDTEARTIKEL

CVE-2026-116200 - Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

CVE-2026-116191 - Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

CVE-2026-116192 - rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots

CVE-2026-116183 - phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID

CVE-2026-116177 - vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

CVE-2026-116178 - vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders