{"metadata": {"vulnerability": "CVE-2026-25784", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-02-06T14:21:19.086Z", "date_only": false, "value": "2026-02-06T14:21:19.086Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-25784", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / HW", "record": "CVE-2026-25784", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-23T08:54:57.880Z", "date_only": false, "value": "2026-10-23T08:54:57.880Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-25784", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-23T08:54:57.880Z", "date_only": false, "value": "2026-10-23T08:54:57.880Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-25784", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T08:54:57.880Z", "date_only": false, "value": "2026-10-23T08:54:57.880Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / HW", "record": "CVE-2026-25784", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T09:05:04.180Z", "date_only": false, "value": "2026-10-23T09:05:04.180785Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117489421746812449", "record": "CVE-2026-25784", "field": "creation_timestamp", "uuid": "61d34c4b-f3c9-46e7-8636-adf633b55d41", "content": "CVE-2026-25784 bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service authentication to the container network, but evaluated to an empty string when the environment variable WIKI_SERVICE_TOKEN_AUTH_ALLOWED was not set. An empty value disables the IP restriction in the token authenticator component (mwstake/mediawiki-component-token-authenticator). As a result, any user with read access to the wiki (anonymous users on publicly readable wikis) could obtain an application token from the REST API and use it to get a session with sysop privileges as the internal service user.\nThis issue affects BlueSpice: from 5.2.3 before 5.2.7, and the 5.2.7 container images published before 2026-10-19 15:37 UTC.\nhttps://www.cve.org/CVERecord?id=CVE-2026-25784https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-07https://github.com/hallowelt/docker-bluespice-wiki/commit/04b840be565b508f6e741c376970909b69d2a444#bluespice #HalloWelt!GmbH #BlueSpice#CVE_2026_25784#bot", "url": "https://infosec.exchange/users/cve/statuses/117489421746812449"}, {"timestamp": "2026-10-23T09:17:06Z", "date_only": false, "value": "2026-10-23T09:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XRR7-CJX6-X9J2", "record": "GHSA-XRR7-CJX6-X9J2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T09:17:06.943Z", "date_only": false, "value": "2026-10-23T09:17:06.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25784", "record": "FKIE_CVE-2026-25784", "field": "published"}, {"timestamp": "2026-10-23T09:31:23Z", "date_only": false, "value": "2026-10-23T09:31:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XRR7-CJX6-X9J2", "record": "GHSA-XRR7-CJX6-X9J2", "field": "published"}, {"timestamp": "2026-10-23T09:31:23Z", "date_only": false, "value": "2026-10-23T09:31:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XRR7-CJX6-X9J2", "record": "GHSA-XRR7-CJX6-X9J2", "field": "modified"}, {"timestamp": "2026-10-23T19:57:42.660Z", "date_only": false, "value": "2026-10-23T19:57:42.660", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25784", "record": "FKIE_CVE-2026-25784", "field": "lastModified"}]}