VULNERABILITY INTELLIGENCE

CVE-2026-52777

EPSS probability0.28%
CISA KEVNot currently listed
Published2026-09-05
Last modified2026-09-08

Description

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6.

Weakness classification

  • security-advisories@github.com: CWE-352

Primary references