High severity7.5NVD Advisory· Published Jul 1, 2026· Updated Jul 9, 2026
CVE-2026-58036
CVE-2026-58036
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php, includes/User/UserGroupManager.Php.
Patches
Vulnerability mechanics
References
1- phabricator.wikimedia.org/T425406nvdPermissions Required
News mentions
0No linked articles in our index yet.