CVE-2026-104439CWE-204

CVE-2026-104439

Medium · published October 2, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
25.9
In the wild
Unconfirmed
What it is

YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differing responses. Attackers can submit emails to the MotDePassePerdu recovery page without rate limiting to identify valid accounts for targeted phishing or password-spraying.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00337 · 25.9th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2026-10-02T16:17Z
References (3)
https://github.com/YesWiki/yeswiki/security/advisories/GHSA-892r-45m6-45xc · [email protected]https://www.vulncheck.com/advisories/yeswiki-before-4.6.7-user-enumeration-via-lost-password-flow · [email protected]https://github.com/YesWiki/yeswiki/security/advisories/GHSA-892r-45m6-45xc · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 04 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 02 OCT 11:38Z
    YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
    cvelistv5