Advisories · Technology

requarks Wiki.js.

Every CVE that names requarks Wiki.js among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92776 CVE record

CVSS 8.6 High

Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass
- requarks Wiki.js
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-92775 CVE record

CVSS 7.1 High

Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch
- requarks Wiki.js
- Server-side request forgery (SSRF)
Not analysed yet 16 Sept 2026
CVE-2026-92774 CVE record

CVSS 5.3 Medium

Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission
- requarks Wiki.js
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2020-15274 CVE record

CVSS 5.8 Medium

Stored XSS via search result in Wiki.js
- Requarks wiki.js
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2020
CVE-2020-11051 CVE record

CVSS 6.9 Medium

XSS in Wiki.js
- Requarks Wiki.js
- Cross-site scripting (XSS)
Not analysed yet 5 May 2020