CVE-2026-26477 is a high-severity Denial of Service (DoS) vulnerability impacting Dokuwiki v.2025-05-14b 'Librarian'. A remote attacker can exploit this flaw via the media_upload_xhr() function in the media.php file. With a CVSS score of 7.5, it features a network attack vector and low attack complexity, allowing unauthenticated attackers to severely disrupt system availability. There is currently no evidence of active exploitation, and public exploit code is not available in common repositories. Community discussion and media coverage are minimal, and it is not listed on the CISA Known Exploited Vulnerabilities catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2025-05-14bCPE matchmatch criteria | cpe:2.3:a:dokuwiki:dokuwiki:2025-05-14b:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.