CVE-2026-103442

Published: Set 30, 2026 Last Modified: Set 30, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,2

Source: c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Attack Vector: network

Attack Complexity: high

Privileges Required: high

User Interaction: passive

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection.

This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Other

Potential Impacts:

Varies By Context

Technologies: Not Technology-Specific, ICS/OT

https://gerrit.wikimedia.org/r/q/I9c59e5c3f217c1eaa02934a076604049bac2b025