OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-96872

LOW · CVSS 2.9 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The Mediawiki - WikiLambda Extension prior to version 1.47.0 on Windows, Linux, and MacOS is vulnerable due to improper handling of permissions, allowing unauthorized access to functionalities not properly constrained by Access Control Lists (ACLs). Although the severity is rated low, organizations using this extension should prioritize remediation to prevent potential exploitation that could lead to unauthorized data access. Users and administrators of Mediawiki installations should ensure they are running the latest version to mitigate this risk.

CVE
CVE-2026-96872
Severity
LOW
CVSS
2.9
EPSS
0.23%
Windows Linux

Original NVD Description

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.