Vulnerabilities

TI-2026-26417 CVE-2026-34095 · GHSA-596g-9fv7-mq62

action=raw with Special:Mypage subpage title responds with "Content-Type: text/html" on ctype=text/javascript request

LOW 2

Vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00183 Published 2026-05-11 Fixed in 1.43.7, 1.44.4 +1 CWE-668

TI-2026-26416 CVE-2026-34094 · GHSA-g863-m67x-whh5

LOW 10

Vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 2.0 Network High privileges User interaction EPSS 0.0017 Published 2026-05-11 Fixed in 1.43.7, 1.44.4 +1 CWE-668

TI-2026-26415 CVE-2026-34093 · GHSA-34wc-vx7r-829j

LOW 7

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 1.1 Network Low privileges User interaction EPSS 0.00227 Published 2026-05-11 Fixed in 1.43.7, 1.44.4 +1 CWE-200

TI-2026-26414 CVE-2026-34092 · GHSA-rg4j-v2c4-8gfh

LOW 11

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00237 Published 2026-05-11 Fixed in 1.43.7, 1.44.4 +1 CWE-200

TI-2026-26413 CVE-2026-34091 · GHSA-7gvw-7r69-cgx7

LOW 31

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.0029 Published 2026-05-11 Fixed in 1.43.7, 1.44.4 +1 CWE-200

TI-2026-26410 CVE-2026-34088 · GHSA-wpmg-m9mx-w7pj

LOW 8

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 1.3 Network No auth User interaction EPSS 0.0029 Published 2026-05-11 Fixed in 1.43.7, 1.44.4 +1 CWE-200