https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T05:35:30.865138+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-104469 fkie_cve-2026-104469 2026-10-03T05:35:32.342798+00:00

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki-* session cookie can reuse it after login to access private content and perform actions with the victim's privileges.

 https://vulnerability.circl.lu/vuln/ghsa-c9hw-c2mv-jj5c GHSA-c9hw-c2mv-jj5c 2026-10-03T05:35:32.342895+00:00

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki-* session cookie can reuse it after login to access private content and perform actions with the victim's privileges.