CVE-2026-103442

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...

CVE-2026-103442 MergeAccount PHP object injection via session-key substitution

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...

CVE-2026-103442

The MediaWiki CentralAuth extension versions 1.46, 1.45, and 1.43 are vulnerable to a Code Injection flaw due to an external control of system or configuration settings. While the description mentions a MergeAccount PHP object injection via session-key substitution in related records, the primary...

CVE-2026-103442: External Control of System or Configuration Setting

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...

CVE-2026-100244

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100244 CentralAuth exposes locally suppressed block information via globaluserinfo API and Special:CentralAuth (incomplete fix for CVE-2025-62669)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100244

The Wikimedia Foundation Mediawiki - CentralAuth Extension is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. The flaw allows for the exposure of locally suppressed block information via the globaluserinfo API and Special:CentralAuth . This issue is char...

EUVD-2026-89090

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100244: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from before 1.46.1, 1.45.5, 1.43.10...

PT-2026-102678

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from before 1.46.1, 1.45.5, 1.43.10...

PT-2025-42684

Name of the Vulnerable Software and Affected Versions Wikimedia Foundation Mediawiki - CentralAuth Extension versions prior to 1.39 Description A resource leak exposure exists in the Wikimedia Foundation Mediawiki - CentralAuth Extension. This allows for the potential exposure of sensitive...

CVE-2025-62669: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39...

CVE-2025-6926: Improper Authentication

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

PT-2025-27814

Name of the Vulnerable Software and Affected Versions: Mediawiki - CentralAuth Extension versions 1.39.0 through 1.39.12 Mediawiki - CentralAuth Extension versions 1.42.0 through 1.42.6 Mediawiki - CentralAuth Extension versions 1.43.0 through 1.43.1 Description: The issue is related to an Improp...