OCTOBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-102796

HIGH · CVSS 7.5 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

The UserPageViewTracker Extension in Mediawiki is vulnerable to SQL Injection due to improper neutralization of special elements in SQL commands. This flaw could allow an attacker to execute arbitrary SQL queries, potentially compromising the integrity and confidentiality of the database. Organizations using affected versions of the Mediawiki extension should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-102796
Severity
HIGH
CVSS
7.5
EPSS
0.25%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.