---
cve: "CVE-2026-116820"
severity: "MEDIUM"
cvss: 6.9
epss: ""
vendor: "YesWiki"
kev: false
exploited: false
published: "2026-10-27 00:17:16"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-11-01T00:01:54+01:00"
---

# CVE-2026-116820

> 6.9 MEDIUM · 🧪 PoC

## Beschreibung

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.

## CNA-Record (Kanon, cvelistV5)

- CNA: **VulnCheck**
- State: PUBLISHED
- Stand: 2026-10-31 02:11:26
- CNA-CVSS: **6.9** (`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **poc**
  - Automatable: **yes**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Schwachstellen-Klasse

- **CWE-215** — Insertion of Sensitive Information Into Debugging Code
  The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

## Patch verfügbar (OSV)

- bba4abccdf68476dde3d7119019139121849fb32 (Commit)

## Referenzen

- <https://github.com/YesWiki/yeswiki/security/advisories/GHSA-98mc-h829-5hwm>
- <https://www.vulncheck.com/advisories/yeswiki-from-4.6.0-before-4.7.0-sql-query-disclosure-via-showreq-parameter>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-116820/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_