CVE-2026-52762

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-52762
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52762.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-52762
Aliases
Published
2026-09-04T23:39:36Z
Modified
2026-09-09T03:30:48Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
Details

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki Bazar contains a stored Server-Side Template Injection (SSTI) vulnerability in the semantic template feature that can be escalated to confirmed Remote Code Execution (RCE). An authenticated administrator can place arbitrary Twig expressions into the Semantic template (Twig) field (bn_sem_template), and that content is later executed server-side when public semantic endpoints are requested. This issue has been patched in version 4.6.6.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-1336"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52762.json"
}
References

Affected packages

Git / github.com/yeswiki/yeswiki

Affected ranges

Type
GIT
Repo
https://github.com/yeswiki/yeswiki
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
89462f1577a8a1fe7fcff75e77b5058a74d8047b
Fixed
fa81922f4103630911cbea98ead3c4b7bc786e19
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.6.6"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v4.*
v4.1.0
v4.1.5
v4.2.0
v4.2.1
v4.2.2
v4.3.0
v4.3.1
v4.4.0
v4.4.1
v4.4.2
v4.4.3
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5
v4.6.0
v4.6.2
v4.6.3
v4.6.4
v4.6.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52762.json"