CVE-2026-37106

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature). The supplier also notes that there is no configuration migration scenario that would result in the self-registration being enabled without the administrators knowledge.

• CWE-640

• https://gist.github.com/KyrieKlay/3260f4eeea025f2cd1daa7eb1360c5a1
• https://github.com/dokuwiki/dokuwiki
• https://github.com/dokuwiki/dokuwiki/issues/4682
• https://gist.github.com/KyrieKlay/3260f4eeea025f2cd1daa7eb1360c5a1

Published

Jun 30, 2026

Last Modified

Jul 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3706A vulnerability was determined in mkj Dropbear up to 2025.89…3.7
• CVE-2026-3707A vulnerability was identified in MrNanko webp4j up to 1.3.x…5.3
• CVE-2026-3708A security flaw has been discovered in code-projects Simple …9.8
• CVE-2026-3709A weakness has been identified in code-projects Simple Fligh…9.8
• CVE-2026-3710A security vulnerability has been detected in code-projects …7.2
• CVE-2026-37100An issue in the Bluetooth Low Energy (BLE) control interface…6.5
• CVE-2026-3711A vulnerability was detected in code-projects Simple Flight …7.2
• CVE-2026-3713A flaw has been found in pnggroup libpng up to 1.6.55. Affec…5.3
• CVE-2026-3714A vulnerability has been found in OpenCart 4.0.2.3. Affected…5.1
• CVE-2026-37149GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADM…7.7
• CVE-2026-3715A vulnerability was found in Wavlink WL-WN579X3-C 231124. Th…8.8
• CVE-2026-3716A vulnerability was determined in Wavlink WL-WN579X3-C 23112…4.8