CVE-2026-32736

MEDIUM 4.3CVE-2026-32736 · Published 18/03/2026 · updated 17/06/2026

In short

CVE-2026-32736 is a MEDIUM (CVSS 4.3) vulnerability affecting wiki (hytalemodding).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.6% of all vulnerabilities.
Fix: update to 1.0.0 or later.

Package	Affected versions	Patched versions
wiki hytalemodding	`< 1.0.0`	`1.0.0`

Description

The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. An Insecure Direct Object Reference (IDOR) vulnerability in versions of the wiki prior to 1.0.0 exposes mod authors' personal information - including full names and email addresses - to any authenticated user who visits a mod page. Any user who creates an account can access sensitive author details by simply navigating to a mod's page via its slug. Version 1.0.0 fixes the issue.

References

HytaleModding/wiki commit 4a96b3f · Patch
HytaleModding/wiki security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free