CVE-2026-103446

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.

  • Published Sep 30, 2026
  • CVSS 7.4 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-103446 at the National Vulnerability Database