VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Jul 1, 2026· Updated Jul 9, 2026

CVE-2026-58029

CVE-2026-58029

Description

Vulnerability in Wikimedia Foundation MediaWiki.

This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php.

This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Affected products

4
  • MediaWiki/MediawikiOSV3 versions
    1.43.8, 1.44.5, 1.45.3, …+ 2 more
    • (no CPE)range: 1.43.8, 1.44.5, 1.45.3, …
    • cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: >=1.43.0,<1.43.9
    • cpe:2.3:a:mediawiki:mediawiki:1.46.0:rc0:*:*:*:*:*:*
  • Wikimedia Foundation/Mediawikillm-fuzzy
    Range: <1.46.0, 1.45.4, 1.44.6, 1.43.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.