https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T12:30:09.057282+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103442 CVE-2026-103442 — MergeAccount PHP object injection via session-key substitution 2026-10-02T12:30:09.059116+00:00

Affected: The Wikimedia Foundation MediaWiki CentralAuth extension

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection.

This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.