Dashboard / CVE-2026-103441

CVE-2026-103441

HIGH 1 PoC
MEDIUM Priority: 0.02 BB Relevance: 54/100
Published: 2026-09-30 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Network Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: Active
S: N
AT: Present
VC: High
VI: High
VA: Low

Description

Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
The Wikimedia Foundation MediaWiki Wikibase extension 1.46
The Wikimedia Foundation MediaWiki Wikibase extension 1.45
The Wikimedia Foundation MediaWiki Wikibase extension 1.43

References & Advisories (2)

Proof of Concept (1)

—
https://github.com/BomboBombone/CVE-2026-103441
nomi-sec

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ PoC available (1)

CVSS Score

7.2 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:I/V:C/RE:M/U:Red

EPSS — Exploitation Probability

0.28%
Raw Score 0.002820
Percentile 21.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00282
2026-11-12
0.00282
2026-11-10
0.00282
2026-11-09
0.00282

Intelligence Sources

mitre ref →
nvd ref →

External Links