CVE-2026-100244

The Wikimedia Foundation Mediawiki - CentralAuth Extension is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. The flaw allows an attacker to access locally suppressed block information via the globaluserinfo API and Special:CentralAuth . This issue is an...