CVE-2026-102796

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from * before 1.46.1, 1.45.5, 1.43.10.

• CWE-89

• https://gerrit.wikimedia.org/r/q/I43c5360c2f78611351b5dc4c90a80e627d51deaf
• https://phabricator.wikimedia.org/T432836

Published

Sep 29, 2026

Last Modified

Sep 29, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102771A security vulnerability has been detected in Naichen ThinkC…4.7
• CVE-2026-10278A vulnerability was determined in ishayoyo excel-mcp up to 1…6.3
• CVE-2026-10279A vulnerability was identified in hiraishikentaro wezterm-mc…6.3
• CVE-2026-102792A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. …9.1
• CVE-2026-102793A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vu…9.1
• CVE-2026-102794A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0…9.1
• CVE-2026-10280A security flaw has been discovered in horizon921 mcpilot 0.…7.3
• CVE-2026-102804A vulnerability was detected in Nothings stb up to 2c980bb59…6.5
• CVE-2026-102805A flaw has been found in Nothings stb up to 1.16. This affec…6.5
• CVE-2026-102806OpenClaw before 2026.9.5 contains an incorrect authorization…6.3
• CVE-2026-102807OpenClaw before 2026.9.4 contains an incorrect authorization…5.3
• CVE-2026-102808PX4 Autopilot through 1.17.0 contains a NULL pointer derefer…6.5