CVE Intelligence

The Wikimedia Foundation OATHAuth vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation OATHAuth: 2 record(s), with affected versions and fixes.

CVE-2026-34087 High · 7.5 CWE-200 May 11, 2026
Users API leaks whether privileged users have their user groups disabled for lack of 2FA
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2025-11173 None · 0.0 Feb 2, 2026
Reauth for enabling 2FA can be bypassed by submitting a form
Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14, 1.43.4, 1.44.1.