Description
An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature). The supplier also notes that there is no configuration migration scenario that would result in the self-registration being enabled without the administrators knowledge.
Published: 2026-06-30
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. The supplier asserts that this behavior is intentional when the product is configured for self‑registration, which is a non‑default feature, and that no configuration migration can enable self‑registration without the administrator’s knowledge. For installations that have the self‑registration feature enabled, the flaw permits unauthorized account creation (CWE‑640) and constitutes an authentication bypass (CWE‑306).

Affected Systems

The affected software is DokuWiki version 2025-05-14b "Librarian" 56.2. Any installation of this release that has the register feature enabled is vulnerable; the flaw only applies when self‑registration is allowed, a configuration that is not enabled by default.

Risk and Exploitability

Based on the provided data, the attack vector is remote network access to the register endpoint. The EPSS score of <1% indicates a very low exploitation probability, while the CVSS score of 9.8 reflects a critical severity. The vulnerability is not listed in the CISA KEV catalog, indicating that no known exploits have been reported yet.

Generated by OpenCVE AI on July 31, 2026 at 16:40 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade DokuWiki to the latest stable release that contains the fix for the register function flaw.
  • If an upgrade is not possible, disable the register functionality by removing or commenting out the relevant code in inc/auth.php or disabling self‑registration in the configuration file.
  • Limit access network‑level controls, restricting it to trusted IP addresses to mitigate potential unauthorized account creation.

Generated by OpenCVE AI on July 31, 2026 at 16:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 15 Jul 2026 19:45:00 +0000

Type Values Removed Values Added
Description An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature). An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature). The supplier also notes that there is no configuration migration scenario that would result in the self-registration being enabled without the administrators knowledge.

Fri, 03 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title Remote Account Creation Enabled by DokuWiki Self-Registration Function DokuWiki: DokuWiki: Unauthorized account creation via registration function
Weaknesses CWE-306
References
Metrics threat_severity

None

 threat_severity

Low

Thu, 02 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Title Remote Account Creation Enabled by DokuWiki Self-Registration Function

Thu, 02 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Register Function in DokuWiki 2025-05-14b
Weaknesses CWE-94

Wed, 01 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-640
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Description An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary code via the register function in inc/auth.php An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature).
References

Wed, 01 Jul 2026 04:15:00 +0000

Type Values Removed Values Added
First Time appeared Dokuwiki
Dokuwiki dokuwiki
Vendors & Products Dokuwiki
Dokuwiki dokuwiki

Wed, 01 Jul 2026 00:00:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Register Function in DokuWiki 2025-05-14b
Weaknesses CWE-94

Tue, 30 Jun 2026 22:15:00 +0000

Type Values Removed Values Added
Description An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary code via the register function in inc/auth.php
References

Subscriptions

Dokuwiki Dokuwiki
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-21T16:38:00.281Z

Reserved: 2026-04-06T00:00:00.000Z

Link: CVE-2026-37106

cve-icon Vulnrichment

Updated: 2026-07-01T15:10:19.121Z

cve-icon NVD

No data.

cve-icon Redhat

Severity : Low

Publid Date: 2026-06-30T00:00:00Z

Links: CVE-2026-37106 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T16:45:03Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function

  • CWE-640

    Weak Password Recovery Mechanism for Forgotten Password