BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

YesWiki

CVE-2026-116822: YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the

CVE-2026-116822 Oct 27, 2026 Source: Vendor

YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace via the template GET parameter. Attackers can append crafted template values to pages containing the bazarliste action to force unintended layouts, causing page defacement for visitors following the crafted link.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-116822
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines
All 2 CVEs 2 Additional recognition 0 Unclaimed only
Showing 1–2 of 2
CVE-2026-116822 BR2026-0000-034021 unclaimed
Credited as manus-pi
CVE-2026-116822 BR2026-0000-034022 unclaimed
Credited as manus-use