Disclosure summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.
Source-reported weakness categories
CWE-89
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2026-102796
Open original source · Updated Oct 01, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
Original records & references
- NIST NVD record
- CVE Program record
- gerrit.wikimedia.org
- phabricator.wikimedia.org
- phabricator.wikimedia.org
PUBLISHED 2026-09-29T13:17:08-04:00
MODIFIED 2026-10-01T15:17:17-04:00
INGESTED 2026-10-06T11:43:05-04:00