chatwiki vulnerabilities

Products

• chatwiki 1

Latest chatwiki CVEs

Newest publication first

1. CVE-2026-124027 ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

   Published 2026-11-06

   High·CVSS 8.7 EPSS 0.49%

   ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query parameters, bypassing th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.