CVE-2026-103442: The Wikimedia Foundation Mediawiki Centralauth Extension

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

Affected products

• The Wikimedia Foundation Mediawiki Centralauth Extension: version 1.46 only; version 1.45 only; version 1.43 only

Published 2026-09-30. Last modified 2026-09-30.