Wikimedia Foundation OATHAuth

• CVE-2026-34087 Medium 5.1 Users API leaks whether privileged users have their user groups disabled for lack of 2FA 0.3%
• CVE-2025-11173 None 0.0 Reauth for enabling 2FA can be bypassed by submitting a form 0.4%