CVE-2026-58027

Analyzed Analyzed - Analysis Complete

Information Exposure in Wikimedia AbuseFilter

Publication date: 2026-07-01

Last updated on: 2026-07-09

Assigner: wikimedia-foundation

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-01

Last Modified

2026-07-09

Generated

2026-07-21

AI Q&A

2026-07-01

EPSS Evaluated

2026-07-20

NVD

CVE-2026-58027

EUVD

EUVD-2026-41021

Affected Vendors & Products

Vendor	Product	Version / Range
mediawiki	mediawiki	From 1.44.0 (inc) to 1.44.6 (exc)
mediawiki	mediawiki	From 1.45.0 (inc) to 1.45.4 (exc)
mediawiki	mediawiki	From 1.43.0 (inc) to 1.43.9 (exc)
mediawiki	mediawiki	1.46.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an Exposure of Sensitive Information to an Unauthorized Actor in the Wikimedia Foundation AbuseFilter component.

It is related to the program files includes/Api/QueryAbuseFilters.Php and affects versions of AbuseFilter before 1.46.0, including 1.45.4, 1.44.6, and 1.43.9.

Impact Analysis

This vulnerability can lead to unauthorized actors gaining access to sensitive information that they should not be able to see.

Such exposure can compromise confidentiality and potentially lead to further security risks depending on the nature of the sensitive information exposed.

Compliance Impact

This vulnerability involves the exposure of sensitive information to an unauthorized actor in the Wikimedia Foundation AbuseFilter component.

Exposure of sensitive information can potentially lead to non-compliance with data protection regulations such as GDPR and HIPAA, which require the protection of personal and sensitive data from unauthorized access.

However, specific impacts on compliance with these standards depend on the nature of the exposed information and the context of its use, which is not detailed in the provided information.

Hi! I’m here to help you understand CVE-2026-58027. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70