CVE-2026-52777
YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6.
| CWE | CWE-352 CWE-502 |
| Vendor | yeswiki |
| Product | yeswiki |
| Published | Sep 4, 2026 |
| Last Updated | Sep 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for yeswiki yeswiki
Be the first to know when new unknown vulnerabilities affecting yeswiki yeswiki are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
YesWiki / yeswiki
< 4.6.6