Skip to content
OpenAdvisories

Product · requarks

Wiki.js

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-92776

    Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass

    Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing a prefix with authorized folders. Users granted access to a folder can read and modify unrelated pages with matching pr…

    requarks Wiki.js