[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-52777":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-05T03:56:46.258Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":47,"aliases":48,"duplicate_of":9,"upstream":49,"downstream":50,"duplicates":51,"related":52,"reserved_at":9,"published_at":53,"modified_at":53,"state":54,"summary":55,"references_raw":64,"kevs":80,"epss":81,"epss_history":84,"metrics":86,"affected":93},"CVE-2026-52777","YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6.",null,[11,36],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.","weakness","Stable","Compound","Medium",[20,24,28,32],{"id":21,"name":22,"techniques":23},"CAPEC-111","JSON Hijacking (aka JavaScript Hijacking)",[],{"id":25,"name":26,"techniques":27},"CAPEC-462","Cross-Domain Search Timing",[],{"id":29,"name":30,"techniques":31},"CAPEC-467","Cross Site Identification",[],{"id":33,"name":34,"techniques":35},"CAPEC-62","Cross Site Request Forgery",[],{"_key":37,"id":37,"name":38,"description":39,"type":15,"status":40,"abstraction":41,"likelihood_of_exploit":18,"capec":42},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","Draft","Base",[43],{"id":44,"name":45,"techniques":46},"CAPEC-586","Object Injection",[],[],[],[],[],[],[],"2026-09-04T23:51:46.992Z","Received",{"cisa_kev":56,"cisa_ransomware":56,"cisa_vendor":9,"epss_severity":57,"epss_score":58,"severity":59,"severity_score":60,"severity_version":61,"severity_source":62,"severity_vector":63,"severity_status":54},false,"low",0.00379,"critical",9.4,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",[65,71,76],{"url":66,"sources":67,"tags":69},"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9369-69wj-7m2f",[62,68],"nvd",[70],"X Refsource CONFIRM",{"url":72,"sources":73,"tags":74},"https://github.com/YesWiki/yeswiki/commit/8f70a8d6b8befa0e644d03c785701dbbc55b8fd0",[62,68],[75],"X Refsource MISC",{"url":77,"sources":78,"tags":79},"https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6",[62,68],[75],[],{"date":82,"score":58,"percentile":83},"2026-06-14",0.5994,[85],{"date":82,"score":58,"percentile":83},[87,90],{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":88},{"baseScore":60,"baseSeverity":89,"vectorString":63,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":68,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":91},{"baseScore":60,"baseSeverity":89,"vectorString":92,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[94],{"ecosystem":9,"name":95,"vendor":95,"product":95,"cpe_part":96,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":97},"yeswiki","a",[98],{"version":99,"is_range":100,"range_type":62,"version_start":9,"version_start_type":9,"version_end":101,"version_end_type":102,"fixed_in":9},"\u003C 4.6.6",true,"4.6.6","excluding"]