{"id":"CVE-2026-52766","title":"YesWiki is a wiki system written in PHP","summary":"YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST and deletes every wiki page whose tag appears in that arra…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-276","CWE-862"],"vendor":"YesWiki","product":"yeswiki","affected":["yeswiki < 4.6.6"],"patched":["yeswiki/yeswiki 4.6.6"],"published":"2026-09-05","updated":"2026-09-09","sourceUpdated":"2026-09-09T17:17:22.047","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-52766","references":[{"url":"https://github.com/YesWiki/yeswiki/commit/ed5b548a705c8091ba0282aaaba73ddda976abef","label":"security-advisories@github.com"},{"url":"https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6","label":"security-advisories@github.com"},{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6x7x-gcmf-7r8x","label":"security-advisories@github.com"},{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6x7x-gcmf-7r8x","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/advisories/GHSA-6x7x-gcmf-7r8x"}],"tags":["nvd","cve.org","exploit-available","ghsa","composer"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-09T16:01:45.498684Z"},"epss":0.00579,"epssPercentile":0.45402,"aliases":["GHSA-6x7x-gcmf-7r8x"],"ecosystem":"composer","ingestedAt":"2026-07-09T21:52:34.698Z","slug":"CVE-2026-52766","body":"## Overview\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST and deletes every wiki page whose tag appears in that array, with no authorization check anywhere in the action body or in the page-deletion path it invokes. Combined with YesWiki's allow-by-default action ACL model, any user who has page write access, which is the default for everyone (default_write_acl='*') on a fresh install can permanently delete arbitrary wiki pages, including the front page, admin pages, and pages owned by other users. This issue has been patched in version 4.6.6.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-52766)\n\nAffected packages:\n\n- `yeswiki/yeswiki < 4.6.6`\n\nPatched in:\n\n- `yeswiki/yeswiki 4.6.6`\n\nSource: https://github.com/advisories/GHSA-6x7x-gcmf-7r8x","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":50.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201742,"id":"CVE-2026-52766","ts":1789399664769,"field":"exploit_available","old":"false","new":"true"},{"seq":200472,"id":"CVE-2026-52766","ts":1789397302140,"field":"exploit_available","old":"true","new":"false"},{"seq":198389,"id":"CVE-2026-52766","ts":1789391889816,"field":"exploit_available","old":"false","new":"true"},{"seq":196185,"id":"CVE-2026-52766","ts":1789383532528,"field":"exploit_available","old":"true","new":"false"},{"seq":195114,"id":"CVE-2026-52766","ts":1789380415992,"field":"exploit_available","old":"false","new":"true"},{"seq":193901,"id":"CVE-2026-52766","ts":1789378412558,"field":"exploit_available","old":"true","new":"false"},{"seq":192688,"id":"CVE-2026-52766","ts":1789376365922,"field":"exploit_available","old":"false","new":"true"},{"seq":191475,"id":"CVE-2026-52766","ts":1789373318531,"field":"exploit_available","old":"true","new":"false"},{"seq":190260,"id":"CVE-2026-52766","ts":1789369252103,"field":"exploit_available","old":"false","new":"true"},{"seq":189047,"id":"CVE-2026-52766","ts":1789368197039,"field":"exploit_available","old":"true","new":"false"},{"seq":187830,"id":"CVE-2026-52766","ts":1789365110302,"field":"exploit_available","old":"false","new":"true"},{"seq":186617,"id":"CVE-2026-52766","ts":1789363186390,"field":"exploit_available","old":"true","new":"false"},{"seq":185403,"id":"CVE-2026-52766","ts":1789361058998,"field":"exploit_available","old":"false","new":"true"},{"seq":184190,"id":"CVE-2026-52766","ts":1789358069093,"field":"exploit_available","old":"true","new":"false"},{"seq":182441,"id":"CVE-2026-52766","ts":1789354188466,"field":"exploit_available","old":"false","new":"true"},{"seq":181234,"id":"CVE-2026-52766","ts":1789353052762,"field":"exploit_available","old":"true","new":"false"},{"seq":180027,"id":"CVE-2026-52766","ts":1789350129127,"field":"exploit_available","old":"false","new":"true"},{"seq":178820,"id":"CVE-2026-52766","ts":1789348015469,"field":"exploit_available","old":"true","new":"false"},{"seq":177613,"id":"CVE-2026-52766","ts":1789346248797,"field":"exploit_available","old":"false","new":"true"},{"seq":176406,"id":"CVE-2026-52766","ts":1789342939907,"field":"exploit_available","old":"true","new":"false"},{"seq":176067,"id":"CVE-2026-52766","ts":1789342384583,"field":"exploit_available","old":"false","new":"true"},{"seq":175728,"id":"CVE-2026-52766","ts":1789338551867,"field":"exploit_available","old":"true","new":"false"},{"seq":174523,"id":"CVE-2026-52766","ts":1789334727442,"field":"exploit_available","old":"false","new":"true"},{"seq":173318,"id":"CVE-2026-52766","ts":1789333426180,"field":"exploit_available","old":"true","new":"false"},{"seq":172132,"id":"CVE-2026-52766","ts":1789330967306,"field":"exploit_available","old":"false","new":"true"},{"seq":170946,"id":"CVE-2026-52766","ts":1789328530826,"field":"exploit_available","old":"true","new":"false"},{"seq":169741,"id":"CVE-2026-52766","ts":1789327029312,"field":"exploit_available","old":"false","new":"true"},{"seq":168536,"id":"CVE-2026-52766","ts":1789323594198,"field":"exploit_available","old":"true","new":"false"},{"seq":167331,"id":"CVE-2026-52766","ts":1789319459477,"field":"exploit_available","old":"false","new":"true"},{"seq":166126,"id":"CVE-2026-52766","ts":1789318479931,"field":"exploit_available","old":"true","new":"false"},{"seq":164921,"id":"CVE-2026-52766","ts":1789315666977,"field":"exploit_available","old":"false","new":"true"},{"seq":163716,"id":"CVE-2026-52766","ts":1789313396282,"field":"exploit_available","old":"true","new":"false"},{"seq":162511,"id":"CVE-2026-52766","ts":1789311774202,"field":"exploit_available","old":"false","new":"true"},{"seq":161306,"id":"CVE-2026-52766","ts":1789308450077,"field":"exploit_available","old":"true","new":"false"},{"seq":160811,"id":"CVE-2026-52766","ts":1789304382563,"field":"exploit_available","old":"false","new":"true"},{"seq":160358,"id":"CVE-2026-52766","ts":1789303932961,"field":"exploit_available","old":"true","new":"false"},{"seq":159419,"id":"CVE-2026-52766","ts":1789300360364,"field":"exploit_available","old":"false","new":"true"},{"seq":158649,"id":"CVE-2026-52766","ts":1789299425419,"field":"exploit_available","old":"true","new":"false"},{"seq":157613,"id":"CVE-2026-52766","ts":1789296552051,"field":"exploit_available","old":"false","new":"true"},{"seq":156408,"id":"CVE-2026-52766","ts":1789294523656,"field":"exploit_available","old":"true","new":"false"},{"seq":155203,"id":"CVE-2026-52766","ts":1789292752386,"field":"exploit_available","old":"false","new":"true"},{"seq":153998,"id":"CVE-2026-52766","ts":1789289509198,"field":"exploit_available","old":"true","new":"false"},{"seq":152648,"id":"CVE-2026-52766","ts":1789281425004,"field":"exploit_available","old":"false","new":"true"},{"seq":152288,"id":"CVE-2026-52766","ts":1789281022668,"field":"exploit_available","old":"true","new":"false"},{"seq":151249,"id":"CVE-2026-52766","ts":1789277505068,"field":"exploit_available","old":"false","new":"true"},{"seq":150210,"id":"CVE-2026-52766","ts":1789276005681,"field":"exploit_available","old":"true","new":"false"},{"seq":149177,"id":"CVE-2026-52766","ts":1789273668501,"field":"exploit_available","old":"false","new":"true"},{"seq":148144,"id":"CVE-2026-52766","ts":1789271034971,"field":"exploit_available","old":"true","new":"false"},{"seq":146180,"id":"CVE-2026-52766","ts":1789269250561,"field":"exploit_available","old":"false","new":"true"},{"seq":140464,"id":"CVE-2026-52766","ts":1789256519048,"field":"exploit_available","old":"true","new":"false"}]}