Sensitive Information Exposure in Wikimedia MediaWiki
CVE-2026-58033

5.3MEDIUM

Key Information:

Vendor

Wikimedia Foundation

Status
Mediawiki
Vendor
CVE Published:
1 July 2026

What is CVE-2026-58033?

A vulnerability in Wikimedia Foundation's MediaWiki allows unauthorized access to sensitive information. Specifically, it arises from a flaw in the program files located in includes/Actions/InfoAction.Php. This exposure affects multiple versions of MediaWiki, making it essential for users running versions prior to 1.46.0, including 1.45.4, 1.44.6, and 1.43.9, to upgrade promptly to protect against potential data breaches.

Affected Version(s)

MediaWiki * < 1.46.0, 1.45.4, 1.44.6, 1.43.9

References

https://phabricator.wikimedia.org/T427235

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.