Browse CVEs

CRITICAL 9.8 CVE-2026-14363 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exte… Cargo 3.9.1+ Fix from $2,3002026-07-01 MEDIUM 6.1 CVE-2026-14358 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Ext… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 CRITICAL 9.8 CVE-2026-58521 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exte… Cargo 3.9.1+ Fix from $2,3002026-07-01 MEDIUM 6.1 CVE-2026-58520 URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Fl… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 HIGH 8.8 CVE-2026-8857 A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Ph… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,9502026-07-01 MEDIUM 6.1 CVE-2026-58037 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 6.1 CVE-2026-58038 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vu… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 HIGH 7.5 CVE-2026-58036 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki Mitigation only Fix from $1,9502026-07-01 MEDIUM 6.5 CVE-2026-58029 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, … Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 6.5 CVE-2026-58033 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 6.1 CVE-2026-58030 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeS… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 6.1 CVE-2026-58032 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 5.4 CVE-2026-58028 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedi… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 CRITICAL 9.8 CVE-2026-58025 Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Imp… Mediawiki 1.43.9 / 1.44.6+ Fix from $2,3002026-07-01 MEDIUM 6.5 CVE-2026-58027 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 5.7 CVE-2026-58024 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 MEDIUM 5.7 CVE-2026-58026 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,6002026-07-01 HIGH 8.8 CVE-2026-13706 Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShort… Mediawiki 1.43.9 / 1.44.6+ Fix from $1,9502026-07-01 HIGH 7.6 CVE-2026-13707 Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. … Mediawiki 1.43.9 / 1.44.6+ Fix from $1,9502026-07-01 MEDIUM 5.4 CVE-2026-58031 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v… Mediawiki Mitigation only Fix from $1,6002026-07-01 MEDIUM 5.4 CVE-2026-58519 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exte… Cargo 3.9.1+ Fix from $1,6002026-07-01 MEDIUM 6.3 CVE-2026-58518 Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. … Mediawiki 1.3.3+ Fix from $1,6002026-07-01 MEDIUM 6.1 CVE-2026-34095 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, include… Mediawiki 1.43.7 / 1.44.4+ Fix from $1,6002026-05-11 MEDIUM 5.3 CVE-2026-34093 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki 1.43.7 / 1.44.4+ Fix from $1,6002026-05-11 HIGH 7.5 CVE-2026-34087 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * befor… Mediawiki 1.43.7 / 1.44.4+ Fix from $1,9502026-05-11 HIGH 7.5 CVE-2026-34088 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * bef… Mediawiki 1.43.7 / 1.44.4+ Fix from $1,9502026-05-11 HIGH 7.5 CVE-2026-34090 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.… Checkuser 1.45.2+ Fix from $1,9502026-05-11 HIGH 7.5 CVE-2026-34091 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * bef… Mediawiki 1.43.7 / 1.44.4+ Fix from $1,9502026-05-11 HIGH 7.5 CVE-2026-34092 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki 1.43.7 / 1.44.4+ Fix from $1,9502026-05-11 MEDIUM 6.1 CVE-2026-39841 Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allow… Cargo 3.8.7+ Fix from $1,6002026-04-07