CVE-2026-26477

MediumCVSS 4.3

Published: 03/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

Dokuwiki version 2025-05-14b has a denial of service vulnerability in the media_upload_xhr() function in media.php. A remote attacker can cause a denial of service.

Risk Assessment

An attacker can crash the Dokuwiki service, disrupting access to documentation and team collaboration.

Recommendation

Update Dokuwiki to a version that includes a fix for this vulnerability.

Original NVD description (English source)

An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file