CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2026-0817

Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.0%

CVSS Severity

CVSS v3 Score 5.3

References

https://gerrit.wikimedia.org/r/q/I7ed0049691258c8bd2555e599b9b88490fbe3358
https://phabricator.wikimedia.org/T410560

Products affected by CVE-2026-0817

Wikimedia » Campaignevents » Version: 1.39

cpe:2.3:a:wikimedia:campaignevents:1.39
Wikimedia » Campaignevents » Version: 1.43

cpe:2.3:a:wikimedia:campaignevents:1.43
Wikimedia » Campaignevents » Version: 1.44

cpe:2.3:a:wikimedia:campaignevents:1.44
Wikimedia » Campaignevents » Version: 1.45

cpe:2.3:a:wikimedia:campaignevents:1.45

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-0817

Products

Pricing

Contact Us