CVE-2026-0817

The MediaWiki - CampaignEvents extension is affected by a Missing Authorization vulnerability (CWE-862) in versions 1.39, 1.43, 1.44, and 1.45 . This flaw exists within the CampaignEvents API , where a lack of proper authorization checks allows for Privilege Abuse . Specifically, the vulnerabilit...

CVE-2026-0817 CampaignEvents API missing authorization exposes meeting and chat URLs

Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39...