{"uuid": "81ed90bf-4810-4ecb-af50-77a3edf938c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52775", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239081756656483", "content": "CVE-2026-52775: SQL injection in YesWiki < 4.6.6 allows any authenticated user to inject arbitrary SQL via ReactionManager::deleteUserReaction(). CVSS 8.8. No patch confirmed\u2014upgrade to 4.6.6 immediately. Details: https://www.valtersit.com/cve/CVE-2026-52775/ #CVE #infosec #YesWi", "creation_timestamp": "2026-09-09T04:00:20.267049Z"}