Remote Code Execution in DokuWiki Librarian 56.2

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: MITRE

Description

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary code via the register function in inc/auth.php

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-30

Last Modified

2026-06-30

Generated

2026-07-01

AI Q&A

2026-07-01

EPSS Evaluated

N/A

NVD

CVE-2026-37106

Affected Vendors & Products

Vendor	Product	Version / Range
splitbrain	dokuwiki	2025-05-14b

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in DokuWiki version 2025-05-14b "Librarian" 56.2, where a remote attacker can execute arbitrary code by exploiting the register function in the file inc/auth.php.

Impact Analysis

An attacker exploiting this vulnerability could run arbitrary code on the affected system remotely, potentially leading to full system compromise, unauthorized access, data theft, or disruption of services.

Hi! I’m here to help you understand CVE-2026-37106. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70