High severity7.5NVD Advisory· Published May 11, 2026· Updated May 14, 2026
CVE-2026-34092
CVE-2026-34092
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files includes/Skin/Skin.Php.
This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
Affected products
1- Range: <1.43.7,>=1.44.0,<1.44.4,>=1.45.0,<1.45.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- phabricator.wikimedia.org/T384147nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.