CVE-2009-4089: telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary p...

Security readout for executives and security teams

CVE-2009-4089 lets a remote attacker bypass authorization in telepark.wiki 2.4.23 and earlier to delete wiki pages or comments by manipulating a page identifier. The main business risk is unauthorized content destruction, disruption, and loss of trust in affected wiki content. Exposure is limited to organizations still running telepark.wiki 2.4.23 or earlier, especially if reachable by untrusted users or the internet. The product appears old, so risk depends on legacy deployments and forgotten internal wikis. Prioritize if telepark.wiki is internet-facing or holds operationally important content. For most organizations, this is a legacy-application cleanup issue rather than an emergency, unless an affected instance is exposed or unexplained deletions are observed. Mitigation focus: Identify any telepark.wiki instances and determine their version.; If version is 2.4.23 or earlier, consult Telepark security-fix guidance.; Restrict access to the wiki until remediation is confirmed..

Prepared

Jun 28, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.