CVE-2026-0817 — CampaignEvents API missing authorization exposes meeting and chat URLs

CVE-2026-0817

CampaignEvents API missing authorization exposes meeting and chat URLs PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.

Affected (CNA)

Vendor / product	Versions
Wikimedia Foundation / MediaWiki - CampaignEvents extension	affected 1.45; affected 1.44; affected 1.43; affected 1.39

CWE

CWE-862

References

https://phabricator.wikimedia.org/T410560
https://gerrit.wikimedia.org/r/q/I7ed0049691258c8bd2555e599b9b88490fbe3358

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.