CVE-2026-102973
No scorePublic exploitFix available
[Unknown description]
What each source reports
OSVUBUNTU-CVE-2026-102973 No score
[Unknown description]
- Record
UBUNTU-CVE-2026-102973- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mediawikiDebian:12 |
All versions, plus listed versions 1:1.39.10-11:1.39.10-1~deb12u11:1.39.12-1~deb12u11:1.39.13-1~deb12u11:1.39.17-1+deb12u2 Show 27 moreShow less1:1.39.17-1~deb12u11:1.39.2-11:1.39.4-11:1.39.4-1~deb12u11:1.39.4-21:1.39.5-11:1.39.5-1~deb12u11:1.39.6-11:1.39.7-11:1.39.7-1~deb12u11:1.39.8-11:1.43.0+dfsg-11:1.43.0+dfsg-21:1.43.1+dfsg-11:1.43.1+dfsg-21:1.43.10+dfsg-11:1.43.11+dfsg-11:1.43.3+dfsg-11:1.43.5+dfsg-11:1.43.6+dfsg-11:1.43.6+dfsg-1~deb13u11:1.43.6+dfsg-21:1.43.8+dfsg-11:1.43.8+dfsg-1~deb13u11:1.43.8+dfsg-21:1.43.9+dfsg-11:1.43.9+dfsg-1~deb13u1 |
None known |
mediawikiDebian:13 |
All versions, plus listed versions 1:1.43.10+dfsg-11:1.43.11+dfsg-11:1.43.3+dfsg-11:1.43.5+dfsg-11:1.43.6+dfsg-1 Show 7 moreShow less1:1.43.6+dfsg-1~deb13u11:1.43.6+dfsg-21:1.43.8+dfsg-11:1.43.8+dfsg-1~deb13u11:1.43.8+dfsg-21:1.43.9+dfsg-11:1.43.9+dfsg-1~deb13u1 |
None known |
mediawikiDebian:14 |
before 1:1.43.10+dfsg-1, plus listed versions 1:1.43.3+dfsg-11:1.43.5+dfsg-11:1.43.6+dfsg-11:1.43.6+dfsg-1~deb13u11:1.43.6+dfsg-2 Show 5 moreShow less1:1.43.8+dfsg-11:1.43.8+dfsg-1~deb13u11:1.43.8+dfsg-21:1.43.9+dfsg-11:1.43.9+dfsg-1~deb13u1 |
1:1.43.10+dfsg-1 |
mediawikiUbuntu:18.04:LTS |
All versions, plus listed versions 1:1.27.3-11:1.27.4-11:1.27.4-21:1.27.4-3 |
None known |
mediawikiUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1:1.31.2-1ubuntu11:1.31.5-11:1.31.5-1ubuntu11:1.31.5-21:1.31.5-3 Show 4 moreShow less1:1.31.5-3ubuntu11:1.31.6-11:1.31.7-11:1.31.7-1ubuntu0.1~esm1 |
None known |
mediawikiUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 1:1.35.3-11:1.35.4-11:1.35.5-11:1.35.5-1ubuntu11:1.35.5-1ubuntu21:1.35.5-1ubuntu31:1.35.6-11:1.35.6-1ubuntu0.1~esm1 |
None known |
mediawikiUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 1:1.39.4-21:1.39.5-11:1.39.6-11:1.39.7-11:1.39.7-1ubuntu0.1~esm1 |
None known |
mediawikiUbuntu:26.10 |
All versions, plus listed versions 1:1.43.8+dfsg-21:1.43.9+dfsg-11:1.43.9+dfsg-1ubuntu1 |
None known |
mediawikiUbuntu:26.04:LTS |
All versions, plus listed versions 1:1.43.3+dfsg-11:1.43.5+dfsg-11:1.43.6+dfsg-21:1.43.8+dfsg-11:1.43.8+dfsg-2 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | BomboBombone/CVE-2026-102973 | 2026-09-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-102973 is a vulnerability with no CVSS score yet in mediawiki, published October 2, 2026. Public exploit code exists. Fixed in mediawiki 1:1.43.10+dfsg-1.
References
security-tracker.debian.org/tracker/CVE-2026-102973
ubuntu.com/security/CVE-2026-102973
cve.org/CVERecord?id=CVE-2026-102973
lists.wikimedia.org/hyperkitty/list/[email protected]/thread/4WXGIT3HVZ7QSELSPT6BX7XUFM6UMW2D
phabricator.wikimedia.org/T435022
gerrit.wikimedia.org/r/c/mediawiki/core/+/1347843