{"id":"CVE-2026-116825","published":"2026-10-27T00:17:17.997","lastModified":"2026-10-27T00:17:18.280","description":"YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header or tracks seen signatures. Attackers who capture a signed request to the /api/forms/{formId}/actor/inbox endpoint can replay it later to re-execute Delete, Update, Follow, or Undo actions.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","cwes":["CWE-294"],"vendors":[],"products":[],"references":[{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-7m9j-h553-397x","tags":[]},{"url":"https://www.vulncheck.com/advisories/yeswiki-from-4.6.2-before-4.7.0-http-signature-replay-via-activitypub-inbox","tags":[]}],"exploitRefs":[{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-7m9j-h553-397x","tags":[]}],"hasPoc":true,"ai":null}