MC
Product
Mediawiki - CentralAuth extension
4
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add Mediawiki - CentralAuth extension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39937 | 8.8 | Apr 7 | Global vanishing does not completely remove user email Affected: before 1.43 |
| CVE-2026-103442 | 7.2 | Sep 30 | MergeAccount PHP object injection via session-key substitution Affected: 1.46; 1.45; 1.43 |
| CVE-2025-62669 | 6.9 | Oct 18 | UserInfoCard: activeLocalBlocksAllWikis does not do permissions checks Affected: master before 1.39 |
| CVE-2026-103047 | 6.1 | Sep 29 | XSS through i18n message in CentralAuth Affected: before 1.46.1, 1.45.5, 1.43.10 |
Showing 4