Vulnerability · Published Oct 2, 2026 · Assigned by VulnCheck
CVE-2026-104446YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler
Medium 6.5
In plain English
A medium-severity missing authentication in yeswiki from YesWiki. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 62.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient, sender, subject and body for spam and phishing.
Affected products (as reported)
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
References
- GitHub Security Advisory (GHSA-36fx-49jj-57rw) vendor-advisory
- VulnCheck Advisory: YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler third-party-advisory