PT-2025-27814 · Mediawiki+2 · Mediawiki+3

Published 2025-01-01 · Updated 2025-12-16 · CVE-2025-6926

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mediawiki - CentralAuth Extension versions 1.39.0 through 1.39.12 Mediawiki - CentralAuth Extension versions 1.42.0 through 1.42.6 Mediawiki - CentralAuth Extension versions 1.43.0 through 1.43.1

Description: The issue is related to an Improper Authentication vulnerability in the Mediawiki - CentralAuth Extension, allowing attackers to bypass authentication.

Recommendations: For versions 1.39.0 through 1.39.12, update to version 1.39.13 or later. For versions 1.42.0 through 1.42.6, update to version 1.42.7 or later. For versions 1.43.0 through 1.43.1, update to version 1.43.2 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-16101

CVE-2025-6926

DLA-4249-1

DSA-5957-1

Affected Products

Centralauth Extension

Debian

Mediawiki

Red Os

References · 21

• https://osv.dev/vulnerability/CVE-2025-6926 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-6926 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5957-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-6926 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-6926 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-6926 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4249-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6926 · Security Note
• https://bdu.fstec.ru/vul/2025-16101 · Security Note
• https://ubuntu.com/security/CVE-2025-6926 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-mediawiki-cve-2025-6926-7.3 · Note
• https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1165117 · Note
• https://twitter.com/CVEnew/status/1940815286375997781 · Twitter Post
• https://phabricator.wikimedia.org/T389010 · Note