Vulnerability · Published Oct 2, 2026 · Assigned by VulnCheck

CVE-2026-104442YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

Medium 5.8

In plain English

A medium-severity server-side request forgery in yeswiki from YesWiki. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 3.1)5.8Medium

Exploit odds (30 days)0.3%top 74.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read back fetched feed content in the rendered page, and cause feed enclosures to be downloaded into the files directory.

Affected products (as reported)

Vendor	Product	Versions
YesWiki	yeswiki	0 – before 4.6.7

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

References

GitHub Security Advisory (GHSA-jwh5-j4f4-c6xp) vendor-advisory
VulnCheck Advisory: YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action third-party-advisory