https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:46:13.097995+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-247006 EUVD-2026-247006 2026-10-04T17:46:13.101075+00:00 EUVD-2026-247006 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53485 fkie_cve-2025-53485 2026-10-04T17:46:13.101106+00:00

SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing.

This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.

 https://cve.radiocsirt.org/vuln/ghsa-95xf-vj6c-3pj7 GHSA-95xf-vj6c-3pj7 2026-10-04T17:46:13.101163+00:00

SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing.

This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1525 WID-SEC-W-2025-1525 — MediaWiki Extensions und Skins: Mehrere Schwachstellen 2026-10-04T17:46:13.101204+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um SQL-Injection- und XSS-Angriffe durchzuführen, Sicherheitsmechanismen zu umgehen, vertrauliche Informationen offenzulegen oder sich unbefugt höhere Berechtigungen zu verschaffen.