CVE-2026-103442

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code…

c4f26cc8-17ff-4c99-b5e2-38fc1793eacc·CWE-15·Published 2026-09-30

CVSS

—

EPSS

0.00

KEV

Exploits

cve.orgen

223 chars

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

NVDen

223 chars

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
4.0	Primary	cve.org	7.2	—	—	CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber
4.0	Secondary	ENISA EUVD	7.2