Ghostwire

CVE-2026-37106: An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary code via the register...

MEDIUM CVSS 0.0 Exploit Available

Published: June 30, 2026 | Last Modified: June 30, 2026

Description

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary code via the register function in inc/auth.php

Ghostwire Analysis — What This Means Practically

Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

gist.github.com/KyrieKlay/3260f4eeea025f2cd1daa7eb1360c5a1
github.com/dokuwiki/dokuwiki
www.tenable.com/cve/CVE-2026-37106
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-37106