PT-2026-125525

CVE-2026-116820

·

Published

2026-10-26

·

Updated

2026-10-27

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-215: Insertion of Sensitive Information Into Debugging Code
Related identifiers
CVE-2026-116820
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com