OCTOBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-103446

HIGH · CVSS 7.4 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

The MediaWiki WikiLambda extension is vulnerable to an authorization bypass due to a user-controlled key, allowing unauthorized access to restricted functionalities. This high-severity flaw could lead to significant security breaches, enabling attackers to manipulate or access sensitive data. Organizations utilizing the affected version of the MediaWiki WikiLambda extension should prioritize patching this vulnerability to mitigate potential risks.

CVE
CVE-2026-103446
Severity
HIGH
CVSS
7.4
EPSS
0.33%

Original NVD Description

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.