Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

2 briefs RSS
medium advisory

Authorization Bypass in MediaWiki RevisionDelete API

An authorization bypass vulnerability in MediaWiki's RevisionDelete API allows users with limited privileges to remove suppression bits, exposing protected content due to improper permission validation.

MediaWiki web-application vulnerability authorization-bypass
critical advisory

MediaWiki Remote Code Execution via PHP Deserialization

MediaWiki is vulnerable to remote code execution (CVE-2026-58025) via insecure PHP deserialization within the LogEntryBase::extractParams method, allowing authenticated sysop users to execute arbitrary code through malicious XML imports.

MediaWiki remote-code-execution deserialization
1r 2t 2c