Sensitive Information Exposure in Wikimedia Foundation MediaWiki

CVE-2026-58026

What is CVE-2026-58026?

The MediaWiki software developed by the Wikimedia Foundation is affected by a vulnerability that allows unauthorized actors to access sensitive information. The issue arises from specific program files, particularly includes/Parser/Parser.php, which exposes user data under certain conditions. This vulnerability impacts multiple versions of MediaWiki, necessitating prompt updates to safeguard against potential exploitation.

References