Threat database

189 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Low	2.9	EPSS 0.2%	CVE-2026-96872Mediawiki - WikiLambda Extension · Improper handling of insufficient permissions or privileges Low2.9EPSS 0.2%2026-09-23CVE Database V5CVE-2026-96872 Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-280	CVE Database V5	2026-09-23
Medium	6.9	EPSS 0.5%	CVE-2026-14363Mediawiki - Cargo Extension · SQL injection Medium6.9EPSS 0.5%2026-07-01CVE Database V5CVE-2026-14363 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-89	CVE Database V5	2026-07-01
Medium	6.9	EPSS 0.3%	CVE-2026-14358Mediawiki - Charts Extension · cross-site scripting Medium6.9EPSS 0.3%2026-07-01CVE Database V5CVE-2026-14358 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - Charts Extension: from * before 1.43.9,1.44.6,1.45.4. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2026-07-01
Medium	6.9	EPSS 0.3%	CVE-2026-58517Mediawiki - WikiLambda Extension · Authentication bypass using an alternate path or channel Medium6.9EPSS 0.3%2026-07-01CVE Database V5CVE-2026-58517 Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-288	CVE Database V5	2026-07-01
Medium	6.9	EPSS 0.6%	CVE-2026-58521Mediawiki - Cargo Extension · SQL injection Medium6.9EPSS 0.6%2026-07-01CVE Database V5CVE-2026-58521 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4. EPSS 0.6%Vulnerability The Wikimedia Foundation #cwe-89	CVE Database V5	2026-07-01
Medium	6.9	EPSS 0.3%	CVE-2026-58520Mediawiki - UrlShortener Extension · open redirect Medium6.9EPSS 0.3%2026-07-01CVE Database V5CVE-2026-58520 URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from * before 1.43.9, 1.44.6, 1.45.4. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-601	CVE Database V5	2026-07-01
Medium	5.3	EPSS 0.3%	CVE-2026-58030SyntaxHighlight_GeSHi · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.3EPSS 0.3%2026-07-01CVE Database V5CVE-2026-58030 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-79	CVE Database V5	2026-07-01
Medium	5.3	EPSS 0.4%	CVE-2026-58027AbuseFilter · Exposure of Sensitive Information to an Unauthorized Actor Medium5.3EPSS 0.4%2026-07-01CVE Database V5CVE-2026-58027 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.4%Vulnerability Wikimedia Foundation #cwe-200	CVE Database V5	2026-07-01
Medium	5.9	EPSS 0.5%	CVE-2026-58025MediaWiki · Deserialization of untrusted data Medium5.9EPSS 0.5%2026-07-01CVE Database V5CVE-2026-58025 Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.5%Vulnerability Wikimedia Foundation #cwe-502 #cwe-94	CVE Database V5	2026-07-01
Medium	5.3	EPSS 0.4%	CVE-2026-58029MediaWiki · Vulnerability Medium5.3EPSS 0.4%2026-07-01CVE Database V5CVE-2026-58029 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.4%Vulnerability Wikimedia Foundation	CVE Database V5	2026-07-01
Medium	–	EPSS 0.3%	CVE-2026-58028MediaWiki · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') MediumEPSS 0.3%2026-07-01CVE Database V5CVE-2026-58028 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-79	CVE Database V5	2026-07-01
Medium	–	EPSS 0.4%	CVE-2026-58026MediaWiki · Exposure of Sensitive Information to an Unauthorized Actor MediumEPSS 0.4%2026-07-01CVE Database V5CVE-2026-58026 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.4%Vulnerability Wikimedia Foundation #cwe-200	CVE Database V5	2026-07-01
Medium	–	EPSS 2.1%	CVE-2026-8857timeline · CWE-94 MediumEPSS 2.1%2026-07-01CVE Database V5CVE-2026-8857 A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 2.1%Vulnerability Wikimedia Foundation #cwe-94	CVE Database V5	2026-07-01
Medium	–	EPSS 0.3%	CVE-2026-58038timeline · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') MediumEPSS 0.3%2026-07-01CVE Database V5CVE-2026-58038 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-79	CVE Database V5	2026-07-01
Medium	5.3	EPSS 0.3%	CVE-2026-58032MediaWiki · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.3EPSS 0.3%2026-07-01CVE Database V5CVE-2026-58032 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-79	CVE Database V5	2026-07-01
Medium	5.3	EPSS 0.4%	CVE-2026-58033MediaWiki · Exposure of Sensitive Information to an Unauthorized Actor Medium5.3EPSS 0.4%2026-07-01CVE Database V5CVE-2026-58033 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/InfoAction.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.4%Vulnerability Wikimedia Foundation #cwe-200	CVE Database V5	2026-07-01
High	–	EPSS 0.3%	CVE-2026-58037MediaWiki · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') HighEPSS 0.3%2026-07-01CVE Database V5CVE-2026-58037 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Language/Language.Php, includes/Logging/BlockLogFormatter.Php, includes/Logging/LogFormatter.Php, includes/Logging/PatrolLogFormatter.Php, includes/Logging/RenameuserLogFormatter.Php, includes/Logging/TagLogFormatter.Php, includes/Specials/SpecialVersion.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-79	CVE Database V5	2026-07-01
Low	2.1	EPSS 0.3%	CVE-2026-58036MediaWiki · Exposure of Sensitive Information to an Unauthorized Actor Low2.1EPSS 0.3%2026-07-01CVE Database V5CVE-2026-58036 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php, includes/User/UserGroupManager.Php. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-200	CVE Database V5	2026-07-01
Medium	5.1	EPSS 0.4%	CVE-2026-58024MediaWiki · Exposure of Sensitive Information to an Unauthorized Actor Medium5.1EPSS 0.4%2026-07-01CVE Database V5CVE-2026-58024 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUserrights.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.4%Vulnerability Wikimedia Foundation #cwe-200	CVE Database V5	2026-07-01
Medium	–	EPSS 0.3%	CVE-2026-13707OAuth · Session fixation MediumEPSS 0.3%2026-07-01CVE Database V5CVE-2026-13707 Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-384	CVE Database V5	2026-07-01

Showing 41–60 of 189 results