Medium severity5.3NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026
CVE-2026-0817
CVE-2026-0817
Description
Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:wikimedia:campaignevents:1.39:*:*:*:*:mediawiki:*:*+ 3 more
- cpe:2.3:a:wikimedia:campaignevents:1.39:*:*:*:*:mediawiki:*:*
- cpe:2.3:a:wikimedia:campaignevents:1.43:*:*:*:*:mediawiki:*:*
- cpe:2.3:a:wikimedia:campaignevents:1.44:*:*:*:*:mediawiki:*:*
- cpe:2.3:a:wikimedia:campaignevents:1.45:*:*:*:*:mediawiki:*:*
- Range: 1.45, 1.44, 1.43, 1.39
- Range: 1.45, 1.44, 1.43, 1.39
Patches
Vulnerability mechanics
References
2- gerrit.wikimedia.org/r/q/I7ed0049691258c8bd2555e599b9b88490fbe3358nvdPatch
- phabricator.wikimedia.org/T410560nvdIssue Tracking
News mentions
0No linked articles in our index yet.