CVE-2026-114374

A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Upgrading to version 1.9.2 will fix this issue. The name of the patch is 25498ebf5c012b870967e38eec2a1e5133fa1a83. Upgrading the affected component is recommended.

• CWE-918

• https://github.com/leomoon-studios/wiki-go/
• https://github.com/leomoon-studios/wiki-go/commit/25498ebf5c012b870967e38eec2a1e5133fa1a83
• https://github.com/leomoon-studios/wiki-go/releases/tag/v1.9.2
• https://github.com/leomoon-studios/wiki-go/security/advisories/GHSA-7q4p-98g4-pwp7
• https://vuldb.com/cve/CVE-2026-114374
• https://vuldb.com/submit/1019388
• https://vuldb.com/vuln/424731
• https://vuldb.com/vuln/424731/cti

Published

Oct 21, 2026

Last Modified

Oct 28, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114358This vulnerability exists in the Radius Xenia M2M Platform d…9.3
• CVE-2026-11436A vulnerability was detected in Mage AI up to 0.9.79. This i…4.3
• CVE-2026-114361A vulnerability was detected in HarnessRouter up to 0.31.10.…5.6
• CVE-2026-114362A flaw has been found in HarnessRouter up to 0.31.12. This i…6.3
• CVE-2026-11437A flaw has been found in perfree go-fastdfs-web up to 1.3.7.…7.3
• CVE-2026-114370A flaw was found in the PathResourceManager component of the…3.7
• CVE-2026-114375A security flaw has been discovered in leomoon-studios wiki-…6.3
• CVE-2026-114376A weakness has been identified in leomoon-studios wiki-go up…6.3
• CVE-2026-114377A security vulnerability has been detected in leomoon-studio…3.8
• CVE-2026-114378A vulnerability was detected in itsourcecode Online Cake Ord…6.3
• CVE-2026-114379A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6…5.4
• CVE-2026-11438A vulnerability has been found in theonedev onedev up to 15.…6.3