CVE-2026-52767

YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignature() checks the result of PHP's openssl_verify() with a loose boolean negation - if (!openssl_verify(...)) { throw ... }. PHP's openssl_verify has four possible return values: 1, 0, -1, and "false". The -1 row is the bypass: PHP's truthiness rules make -1 a truthy value, so !(-1) === false, the throw is skipped, and the controller proceeds to processActivity(). Any condition that makes OpenSSL's EVP_VerifyFinal() return -1 triggers the bypass. The reachable consequence is the controller silently treats a failed verification as success and processes the attacker's payload. This issue has been patched in version 4.6.6.

• CWE-347

• https://github.com/YesWiki/yeswiki/commit/d1795e0301e1a1078f17b4b98f56fff70de2029e
• https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
• https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g
• https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g

Published

Sep 5, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5276Insufficient policy enforcement in WebUSB in Google Chrome p…6.5
• CVE-2026-52760Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2026-52761ModSecurity is an open source, cross platform web applicatio…5.3
• CVE-2026-52762YesWiki is a wiki system written in PHP. Prior to version 4.…7.1
• CVE-2026-52763YesWiki is a wiki system written in PHP. Prior to version 4.…6.5
• CVE-2026-52766YesWiki is a wiki system written in PHP. Prior to version 4.…9.1
• CVE-2026-52769YesWiki is a wiki system written in PHP. From version 4.6.2 …8.3
• CVE-2026-5277Integer overflow in ANGLE in Google Chrome on Windows prior …7.5
• CVE-2026-52770YesWiki is a wiki system written in PHP. Prior to version 4.…7.5
• CVE-2026-52771YesWiki is a wiki system written in PHP. From version 4.2.0 …8.3
• CVE-2026-52772YesWiki is a wiki system written in PHP. Prior to version 4.…5.5
• CVE-2026-52773YesWiki is a wiki system written in PHP. From version 4.1.0 …6.1