CVE-2026-104469 in YesWiki
Riassunto
di MITRE • 02/10/2026
YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki-* session cookie can reuse it after login to access private content and perform actions with the victim's privileges.
If you want to get best quality of vulnerability data, you may have to visit VulDB.