CVE-2026-34086

LowCVSS 2.1

Published: 11/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

16th percentile - higher than 16% of all known CVEs

Summary

A vulnerability exists in Wikimedia Foundation AbuseFilter affecting versions before 1.43.7, 1.44.4, and 1.45.2. Technical details are not provided in the description.

Risk Assessment

The AbuseFilter vulnerability may allow bypassing filtering mechanisms or cause improper extension behavior, potentially affecting wiki content security.

Recommendation

Update AbuseFilter to version 1.43.7, 1.44.4, 1.45.2 or later.

Other vulnerabilities in AbuseFilter

CVE-2026-58027Medium
A vulnerability in the Wikimedia Foundation AbuseFilter extension allows an unauthorized actor to access sensitive information. The issue is located in the file includes/Api/QueryAbuseFilters.php.

Original NVD description (English source)

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS