CVE-2026-5762

MediumCVSS 5.3

Published: 07/04/2026(UTC)Updated: 21/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

The ReportIncident extension in Wikimedia Foundation MediaWiki has an allocation of resources without limits vulnerability, allowing HTTP DoS attacks. The fix is only available on the master branch.

Risk Assessment

An attacker can perform a Denial of Service (DoS) attack on the MediaWiki server, exhausting system resources and causing service unavailability.

Recommendation

Apply the fix from the master branch or temporarily disable the ReportIncident extension until a stable release with the fix is available.

Original NVD description (English source)

Allocation of resources without limits or throttling vulnerability in Wikimedia Foundation MediaWiki - ReportIncident Extension allows HTTP DoS. This issue was remediated only on the `master` branch.