HIGH 7.2 NVD

CVE-2026-103442

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

References

https://gerrit.wikimedia.org/r/q/I9c59e5c3f217c1eaa02934a076604049bac2b025
https://phabricator.wikimedia.org/T435624

Published: 2026-09-30 · Source: NVD · Feed updated: 2026-09-30

This high severity vulnerability with a CVSS score of 7.2 was published on 2026-09-30 via NVD.

vulnfeed aggregates 9504 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.