CVE-2026-58027

MediumCVSS 6.5

Published: 01/07/2026(UTC)Updated: 25/10/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

31th percentile - higher than 31% of all known CVEs

Summary

A vulnerability in the Wikimedia Foundation AbuseFilter extension allows an unauthorized actor to access sensitive information. The issue is located in the file includes/Api/QueryAbuseFilters.php.

Risk Assessment

The organization is at risk of leaking confidential data related to abuse filters, which could compromise security and user privacy.

Recommendation

Immediately update the AbuseFilter extension to version 1.46.0, 1.45.4, 1.44.6, or 1.43.9 depending on the branch in use.

Other vulnerabilities in AbuseFilter

CVE-2026-34086Low
A vulnerability exists in Wikimedia Foundation AbuseFilter affecting versions before 1.43.7, 1.44.4, and 1.45.2. Technical details are not provided in the description.

Original NVD description (English source)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS