← All advisories

Medium severity4.3NVD Advisory· Published Jul 1, 2026· Updated Jul 10, 2026

CVE-2026-58517

CVE-2026-58517

Description

Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass.

This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.

Affected products

2

MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: >=1.43.0,<1.43.9
Wikimedia Foundation/Mediawiki Extensions Wikilambdallm-fuzzy
Range: <1.43.9, 1.44.6, 1.45.4

Patches

Vulnerability mechanics

References

2

phabricator.wikimedia.org/T428833nvdIssue TrackingVendor Advisory
gerrit.wikimedia.org/r/c/1305376nvdIssue Tracking

News mentions

0

No linked articles in our index yet.