๐Ÿ” CVE Alert

CVE-2026-100378

UNKNOWN 0.0

Missing permission check in the Translate sandbox doRemind action

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from * before 1.46.1, 1.45.5, 1.43.10.

CWE CWE-862
Vendor wikimedia foundation
Product mediawiki - translate extension
Published Sep 25, 2026
Stay Ahead of the Next One

Get instant alerts for wikimedia foundation mediawiki - translate extension

Be the first to know when new unknown vulnerabilities affecting wikimedia foundation mediawiki - translate extension are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Wikimedia Foundation / Mediawiki - Translate Extension
* < 1.46.1, 1.45.5, 1.43.10

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
phabricator.wikimedia.org: https://phabricator.wikimedia.org/T433070 gerrit.wikimedia.org: https://gerrit.wikimedia.org/r/q/I9b74c849b223f18955b42779f5ffbd1e051e415c

Credits

siebrand