Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Wikimedia Foundation
Oathauth
Wikimedia Foundation Oathauth vulnerabilities
wikimedia foundation
oathauth
,
mediawiki
+1 more
Users API leaks whether privileged users have their user groups disabled for lack of 2FA
CVE-2026-34087
Fix available
5.1
Medium
May 11, 2026
wikimedia foundation
oathauth
Reauth for enabling 2FA can be bypassed by submitting a form
CVE-2025-11173
Fix available
0.0
None
October 31, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open