CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

28 matches found

NVD•added 2026/09/30 6:18 p.m.•9 views

CVE-2026-103446

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46...

8.9CVSS0.00328EPSS

SaveExploits1References2

EUVD•added 2026/09/30 5:13 p.m.•6 views

EUVD-2026-90199

8.9CVSS5.9AI score0.00328EPSS

SaveExploits1References2

Cvelist•added 2026/09/30 5:13 p.m.•36 views

CVE-2026-103446 WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments

8.9CVSS0.00328EPSS

SaveExploits1References2

CVE•added 2026/09/30 5:13 p.m.•17 views

CVE-2026-103446

The MediaWiki WikiLambda extension (version 1.46 ) is vulnerable to an Authentication Bypass caused by an Authorization bypass through User-Controlled key vulnerability. This flaw allows for the anonymous execution of unsaved Abstract Wikipedia fragments . No specific remediation or exploit links...

8.9CVSS5.9AI score0.00328EPSS

SaveExploits1References2

RedhatCVE•added 2026/09/30 4:03 a.m.•10 views

CVE-2026-103046

A flaw was found in the MediaWiki WikiLambda extension. Unsafe string replacements on user-provided HTML in the WikifunctionsFragmentRenderer component allow a remote attacker to conduct stored cross-site scripting XSS attacks. By submitting specially crafted input, an attacker can cause arbitrar...

6.1CVSS6.2AI score0.00155EPSS

SaveExploits0References2

NVD•added 2026/09/29 11:17 p.m.•8 views

CVE-2026-103046

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1...

6.1CVSS0.00155EPSS

SaveExploits0References2

CVE•added 2026/09/29 10:41 p.m.•11 views

CVE-2026-103046

The MediaWiki - WikiLambda extension (versions before 1.46.1 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is unsafe string replacements performed on user-provided HTML within the WikifunctionsFragmentRenderer component. A remote attacker can submit specially crafte...

6.1CVSS5.9AI score0.00155EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/29 10:41 p.m.•6 views

CVE-2026-103046 WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTML

5.9AI score0.00155EPSS

SaveExploits0References2

Cvelist•added 2026/09/29 10:41 p.m.•29 views

CVE-2026-103046 WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTML

0.00155EPSS

SaveExploits0References2

EUVD•added 2026/09/26 12:32 a.m.•12 views

EUVD-2026-87349

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the...

4.8CVSS5.7AI score0.00316EPSS

SaveExploits0References3

NVD•added 2026/09/25 10:17 p.m.•20 views

CVE-2026-100383

4.8CVSS0.00316EPSS

SaveExploits0References2

NVD•added 2026/09/25 9:17 p.m.•13 views

CVE-2026-100377

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the master branch...

6.9CVSS0.00324EPSS

SaveExploits0References2

CVE•added 2026/09/25 9:05 p.m.•11 views

CVE-2026-100383

The Mediawiki - WikiLambda Extension version 1.47.0-alpha is vulnerable to Cross-Site Scripting (XSS) due to Improper Neutralization of Input During Web Page Generation . An attacker with high privileges and passive user interaction could potentially execute scripts in the context of the victim's...

4.8CVSS5.8AI score0.00316EPSS

SaveExploits0References2

Cvelist•added 2026/09/25 9:05 p.m.•32 views

CVE-2026-100383 Stored i18n XSS in WikiLambda's VisualEditor integration

4.8CVSS0.00316EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/25 9:05 p.m.•12 views

CVE-2026-100383 Stored i18n XSS in WikiLambda's VisualEditor integration

4.8CVSS5.8AI score0.00316EPSS

SaveExploits0References2

CVE•added 2026/09/25 8:47 p.m.•11 views

CVE-2026-100377

The Wikimedia Foundation Mediawiki - WikiLambda Extension (version 1.47.0-alpha ) is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. This flaw allows revision-deleted pages to be viewed through the extension's action=edit and Special:ViewAbstract functio...

6.9CVSS5.8AI score0.00324EPSS

SaveExploits0References2

EUVD•added 2026/09/25 8:47 p.m.•12 views

EUVD-2026-87358

6.9CVSS5.8AI score0.00324EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/25 8:47 p.m.•10 views

CVE-2026-100377 Revision-deleted pages can be viewed through WikiLambda's action=edit and Special:ViewAbstract

6.9CVSS5.8AI score0.00324EPSS

SaveExploits0References2

Positive Technologies•added 2026/09/25 12:00 a.m.•4 views

PT-2026-99118

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension version 1.47.0-alpha Description An information exposure issue in the Mediawiki - WikiLambda Extension allows unauthorized actors to perform excavation, enabling the viewing of revision-deleted pages. This occu...

6.9CVSS5.9AI score0.00324EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2026/09/25 12:00 a.m.•9 views

CVE-2026-100383: Improper Neutralization of Input During Web Page Generation

4.8CVSS5.8AI score0.00316EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by