Known Vulnerabilities for products from Mediawiki
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mediawiki".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103585 json | Not Provided | 2026-09-30 | 2026-10-01 | |
| CVE-2026-103584 json | Not Provided | 2026-09-30 | 2026-10-01 | |
| CVE-2026-103446 json | Not Provided | 2026-09-30 | 2026-10-06 | |
| CVE-2026-103445 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-103444 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-103443 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-103442 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-103441 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-103440 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-103439 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-58521 json | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundatio... | Not Provided | 2026-07-01 | 2026-07-07 |
| CVE-2026-58520 json | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extens... | Not Provided | 2026-07-01 | 2026-07-09 |
| CVE-2026-58519 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundatio... | Not Provided | 2026-07-01 | 2026-07-06 |
| CVE-2026-58518 json | Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cros... | Not Provided | 2026-07-01 | 2026-07-09 |
| CVE-2026-58517 json | Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allow... | Not Provided | 2026-07-01 | 2026-07-10 |
| CVE-2026-58038 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Founda... | Not Provided | 2026-07-01 | 2026-07-09 |
| CVE-2026-58037 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Founda... | Not Provided | 2026-07-01 | 2026-07-09 |
| CVE-2026-58036 json | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerabil... | Not Provided | 2026-07-01 | 2026-07-09 |
| CVE-2026-58035 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Founda... | Not Provided | 2026-07-01 | 2026-07-09 |
| CVE-2026-58034 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Founda... | Not Provided | 2026-07-01 | 2026-07-09 |
Known software with vulnerabilities from Mediawiki
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mediawiki | Abusefilter | 1.19 |
| Application | Mediawiki | Checkuser | 1.19 |
| Application | Mediawiki | Mediawiki | - |
| Application | Mediawiki | Mobilefrontend | 1.31.0 |
| Application | Mediawiki | Rssreader | 0.2 |
| Application | Mediawiki | Skin | cosmos |
| Application | Mediawiki | Visual Editor | 1.34 |