LIVE · cybersecurity feed
Live wire
vendor

Mediawiki

12 CVEs published in the last four months. Exploited flaws first.

Critical3
High9
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-143639.8criticalcargoImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedi117d ago
CVE-2026-585219.8criticalcargoImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedi117d ago
CVE-2026-580259.8criticalmediawikiDeserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki.117d ago
CVE-2026-137068.8highmediawikiImproper input validation vulnerability in Wikimedia Foundation UrlShortener.117d ago
CVE-2026-88578.8highmediawikiA vulnerability in Wikimedia Foundation timeline.117d ago
CVE-2026-137077.6highmediawikiSession fixation vulnerability in Wikimedia Foundation OAuth.117d ago
CVE-2026-340877.5highmediawikiExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth.168d ago
CVE-2026-340927.5highmediawikiExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.168d ago
CVE-2026-580367.5highmediawikiExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.117d ago
CVE-2026-340917.5highmediawikiExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.168d ago
CVE-2026-340907.5highcheckuserExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.168d ago
CVE-2026-340887.5highmediawikiExposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.168d ago

Filter the full tracker by Mediawiki →