[vulnfeed] 2 critical CVEs — 2026-09-05 04:00 UTC
vulnfeed
Critical alert — 2026-09-05 04:43 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-52777CRITICAL
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injectio
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in versi
CVSS 9.4
CVE-2026-52766CRITICAL
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the wiki action (acti
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST and deletes every wik
CVSS 9.1
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: