CVE-2026-116825 - YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox
CVE ID :CVE-2026-116825 Published : Oct. 27, 2026, 12:17 a.m. | 2 hours, 6 minutes ago Description :YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header or tracks seen signatures. Attackers who capture a...