{"uuid": "6066d0d4-9e80-4cad-983f-7a1cc9e0877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzyduyq562m", "content": "CVE-2026-52770 - YesWiki <4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:03.421527Z"}