zhimaAi CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM zhimaAi CVE published 2026-10-16

CVE-2026-111656

CVE-2026-111656 is a medium-severity vulnerability in ChatWiki versions up to 2.9.6, allowing authenticated users to access and modify form filters of other tenants due to an insecure direct object reference. This issue, tracked as CWE-639, enables attackers to read filter rules and overwrite filter sort orders across tenants by manipulating form_id values in API requests.