MC
Product
Mediawiki - CentralAuth Extension
by Wikimedia Foundation · last CVE Sep 29, 2026
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Mediawiki - CentralAuth Extension to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6926
8.8
0%
Jul 3
Security Authentication Bypass in CentralAuth
Affected: 1.39.x before 1.39.13; 1.42.x before 1.42.7; 1.43.x before 1.43.2
CVE-2026-100244
7.5
0%
Sep 29
CentralAuth exposes locally suppressed block information via globaluserinfo API and Special:CentralAuth (incomplete fix for CVE-2025-62669)
Affected: before 1.46.1, 1.45.5, 1.43.10
Showing 2