https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:00:28.916743+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14685 bdu:2026-14685 2026-10-04T01:00:29.037803+00:00 bdu:2026-14685 https://cve.radiocsirt.org/vuln/euvd-2026-331859 EUVD-2026-331859 2026-10-04T01:00:29.037848+00:00 EUVD-2026-331859 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58028 fkie_cve-2026-58028 2026-10-04T01:00:29.037864+00:00

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth.

This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php.

This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

 https://cve.radiocsirt.org/vuln/ghsa-jqc3-4vrw-8965 GHSA-jqc3-4vrw-8965 2026-10-04T01:00:29.037904+00:00

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth.

This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php.

This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58028 UBUNTU-CVE-2026-58028 2026-10-04T01:00:29.037925+00:00

Affected: Ubuntu:18.04:LTS: mediawiki, Ubuntu:Pro:20.04:LTS: mediawiki, Ubuntu:Pro:22.04:LTS: mediawiki, Ubuntu:Pro:24.04:LTS: mediawiki, Ubuntu:25.10: mediawiki, Ubuntu:26.04:LTS: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2135 WID-SEC-W-2026-2135 — MediaWiki: Mehrere Schwachstellen 2026-10-04T01:00:29.037961+00:00

Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um einen Cross-Site Scripting Angriff durchzuführen.