CVE-2026-26477

Summary

An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/Hebing123/cve/issues/94
• https://github.com/dokuwiki/dokuwiki/releases/tag/release-2025-05-14b

• ←Previous
• Next→