CVE-2026-103440

28th percentile - higher than 28% of all known CVEs

Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation. This issue affects MediaWiki PageTriage extension: 1.46, 1.45, and 1.43.

Exposure of sensitive information may lead to a breach of data confidentiality and its use in further attacks. The risk affects organizations using this extension in vulnerable versions.

Update the PageTriage extension to a version containing the fix or disable it until the update is applied. A review of data access permissions is also recommended.