CVEs published by wikimedia-foundation

CVEs published by wikimedia-foundation (CVE Numbering Authority). 24 tracked.

• CVE-2026-8857 HIGH 8.8 UPGRADE A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files script
• CVE-2026-58025 CRITICAL 9.8 UPGRADE Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is ass
• CVE-2026-13706 HIGH 8.8 UPGRADE Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associat
• CVE-2026-58036 HIGH 7.5 DOWNGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
• CVE-2026-58029 MEDIUM 6.5 UPGRADE Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files include
• CVE-2026-13707 HIGH 7.6 UPGRADE Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program
• CVE-2026-58033 MEDIUM 6.5 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
• CVE-2026-58027 MEDIUM 6.5 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter.
• CVE-2026-58024 MEDIUM 5.7 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
• CVE-2026-58026 MEDIUM 5.7 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
• CVE-2026-58032 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58030 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58037 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58038 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58031 MEDIUM 5.4 DOWNGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58518 MEDIUM 6.3 UPGRADE Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extens
• CVE-2026-58519 MEDIUM 5.4 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wiki
• CVE-2026-58034 MEDIUM 4.8 DOWNGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58035 MEDIUM 4.8 DOWNGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2026-58521 CRITICAL 9.8 UPGRADE Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wiki
• CVE-2026-14363 CRITICAL 9.8 UPGRADE Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wiki
• CVE-2026-14358 MEDIUM 6.1 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wiki
• CVE-2026-58520 MEDIUM 6.1 UPGRADE URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlS
• CVE-2026-58517 MEDIUM 4.3 UPGRADE Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda

← Back to latest CVEs