Security Advisory
CVE-2026-14363
9.8
CRITICAL
Vulnerability Description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.
This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.
Published Date
July 1, 2026
Official Source
NIST NVD Advisory