{"vulnerability": "CVE-2026-52770", "sightings": [{"uuid": "787b258c-df1d-43fa-8fbd-48e52f200260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52770", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-qg78-vmvc-fhjw", "content": "", "creation_timestamp": "2026-07-09T22:35:19.161321Z"}, {"uuid": "e375725d-b064-4411-82df-41ab315f2aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskrwigk22", "content": "\ud83d\udfe0 CVE-2026-52770 - High (7.5)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki\u2019s public Bazar entry-l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:34.654748Z"}, {"uuid": "6066d0d4-9e80-4cad-983f-7a1cc9e0877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzyduyq562m", "content": "CVE-2026-52770 - YesWiki <4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:03.421527Z"}, {"uuid": "c5d9b9b1-608b-45a3-939e-aa93510a3f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117237586426718586", "content": "CVE-2026-52770 - YesWiki <4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:02.405927Z"}]}