Security Advisory

CVE-2026-58036

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-01 14:48:07
Last updated 2026-07-01 15:47:29
Assigner wikimedia-foundation
CVSS score 2.1
State PUBLISHED

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryAllUsers.Php, includes/Api/ApiQueryUsers.Php, includes/Permissions/PermissionManager.Php, includes/User/UserGroupManager.Php.