Is CVE-2026-116820 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116820?

CVE-2026-116820 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-116820

Description

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.