bluespice/wiki vulnerabilities

CVEs whose affected-version data names the bluespice/wiki package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-25784Critical· 9.8

today

bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop

Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's Lo…

▾ MidnightHallo Welt! GmbH · bluespice/wikivia CVEORG