This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-58026 →

DEBIAN-CVE-2026-58026

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with pr...

Original description

The description as published by the source.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1~deb13u1"}]}]

Debian:14 mediawiki

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.43.9+dfsg-1"}]}]

References

advisory security-tracker.debian.org