Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Remediation

References

CVE-2026-58026

Related Vulnerabilities

Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29010)

WordPress Plugin Booking Calendar Local File Inclusion (7.0)

LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16185)

phpList Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-3188)

Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2026-58026