CVE-2026-25784

The BlueSpice software, specifically the bluespice/wiki container image, is vulnerable to privilege escalation due to an insecure default configuration in the token authenticator component (mwstake/mediawiki-component-token-authenticator ). The issue arises because the $mwsgTokenAuthenticatorServ...

CVE-2026-25784 bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop

Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice container image bluespice/wiki allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service...

EUVD-2026-108653

Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice container image bluespice/wiki allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service...