{"uuid": "0c124240-95c3-4677-b64d-4d1df84c25dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117230941126467449", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.907750Z"}