Security Advisory

CVE-2026-104469

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-10-02 11:38:34

Last updated 2026-10-06 16:20:33

Assigner VulnCheck

CVSS score 7.6

State PUBLISHED

Description

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki-* session cookie can reuse it after login to access private content and perform actions with the victim's privileges.

← Browse all CVEs View on cve.org ↗