CVE-2026-46670

CRITICALNuclei

YesWiki: Unauthenticated SQL Injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-46670 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an unauthenticated SQL injection in the Bazar form-import path (`FormManager::create()`) allows any unauthenticated visitor of a default YesWiki install to inject arbitrary SQL into an `INSERT` statement and read the full database, including `yeswiki_users.password` hashes. Version 4.6.4 fixes the issue.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 13, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

yeswiki

Browse YesWiki / yeswiki
CVE List< 4.6.4affected

yeswiki/yeswiki

Browse Packagist / yeswiki/yeswiki
GitHub AdvisoryBefore 4.6.4 · Fixed in 4.6.4affected

Nuclei templates

1
ProjectDiscoveryCRITICALYesWiki < 4.6.4 - Unauthenticated SQL InjectionCVSS 9.8

YesWiki before version 4.6.4 contains an unauthenticated SQL injection vulnerability in the Bazar form-import path. The bn_id_nature parameter in FormManager::create() is concatenated into an INSERT statement without sanitization, allowing unauthenticated attackers to inject arbitrary SQL and read the full database including password hashes.

Impact

An unauthenticated attacker can dump the entire database contents including usernames, emails, and hashed passwords from the yeswiki_users table.

Remediation

Update YesWiki to version 4.6.4 or later.

WeaknessesCWE-89
Authors0x_Akoko
Template tagscvecve2026yeswikisqliunauthintrusive
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Shodan: http.html:"YesWiki"
FOFA: body="YesWiki"
https://github.com/YesWiki/yeswiki/security/advisories/GHSA-jwvv-qr7q-cv8j https://nvd.nist.gov/vuln/detail/CVE-2026-46670

Source: ProjectDiscovery

References

2