← All advisories

High severity8.8NVD Advisory· Published Jul 1, 2026· Updated Jul 9, 2026

CVE-2026-13706

CVE-2026-13706

Description

Improper input validation vulnerability in Wikimedia Foundation UrlShortener.

This vulnerability is associated with program files includes/UrlShortenerUtils.Php.

Affected products

3

MediaWiki/Mediawiki2 versions
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: >=1.43.0,<1.43.9
- cpe:2.3:a:mediawiki:mediawiki:1.46.0:rc0:*:*:*:*:*:*
Wikimedia Foundation/UrlShortenerllm-fuzzy

Patches

Vulnerability mechanics

References

1

phabricator.wikimedia.org/T418533nvdPermissions Required

News mentions

0

No linked articles in our index yet.