CVE-2021-36126

An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abusefilter-blocker message is invalid within the content language, the filter user falls back to the English version, but that English version could also be invalid on a wiki. This would result in a fatal error, and potentially fail to block or restrict a potentially nefarious user.

• https://gerrit.wikimedia.org/r/q/I9e9f44b7663e810de70fb9ac7f6760f83dd4895bPatch, Vendor Advisory
• https://phabricator.wikimedia.org/T284364Exploit, Issue Tracking, Patch, Vendor Advisory
• https://gerrit.wikimedia.org/r/q/I9e9f44b7663e810de70fb9ac7f6760f83dd4895bPatch, Vendor Advisory
• https://phabricator.wikimedia.org/T284364Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Jul 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3612An out-of-bounds memory write flaw was found in the Linux ke…7.8
• CVE-2021-36121An issue was discovered in Echo ShareCare 8.15.5. The file-u…8.8
• CVE-2021-36122An issue was discovered in Echo ShareCare 8.15.5. The UnzipF…8.8
• CVE-2021-36123An issue was discovered in Echo ShareCare 8.15.5. The TextRe…6.5
• CVE-2021-36124An issue was discovered in Echo ShareCare 8.15.5. It does no…9.8
• CVE-2021-36125An issue was discovered in the CentralAuth extension in Medi…7.5
• CVE-2021-36127An issue was discovered in the CentralAuth extension in Medi…4.3
• CVE-2021-36128An issue was discovered in the CentralAuth extension in Medi…9.8
• CVE-2021-36129An issue was discovered in the Translate extension in MediaW…4.3
• CVE-2021-3613OpenVPN Connect 3.2.0 through 3.3.0 allows local users to lo…7.8
• CVE-2021-36130An XSS issue was discovered in the SocialProfile extension i…4.8
• CVE-2021-36131An XSS issue was discovered in the SportsTeams extension in …4.8