CE
Product
CentralAuth
by Wikimedia Foundation · last CVE Jul 1, 2026
1
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add CentralAuth to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58028
5.4
0%
Jul 1
Pretty-printed API output combined with centralauthtoken allows XSS with certain gadgets
Affected: before 1.46.0, 1.45.4, 1.44.6, 1.43.9
Showing 1