CVE-2026-58025

🗓️ 01 Jul 2026 15:23:29Reported by wikimedia-foundationType

CVE-2026-58025 describes a deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. Affected are MediaWiki versions before 1.46.0, including 1.45.4, 1.44.6, and 1.43.9. The issue is linked to deserialization in files: inc...

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2026-58025 Remote Code Execution via Unsafe Deserialization in LogItem Import	1 Jul 202615:23	–	cvelist
Debian CVE	CVE-2026-58025	1 Jul 202615:23	–	debiancve
EUVD	EUVD-2026-41031	1 Jul 202615:23	–	euvd
NVD	CVE-2026-58025	1 Jul 202616:16	–	nvd
OSV	DEBIAN-CVE-2026-58025	30 Jun 202620:48	–	osv
Vulnrichment	CVE-2026-58025 Remote Code Execution via Unsafe Deserialization in LogItem Import	1 Jul 202615:23	–	vulnrichment

[
  {
    "vendor": "Wikimedia Foundation",
    "product": "MediaWiki",
    "repo": "https://gerrit.wikimedia.org/g/mediawiki/core/+/refs/heads/master",
    "programFiles": [
      "includes/Import/WikiImporter.php",
      "includes/Import/WikiRevision.php",
      "includes/Logging/LogEntryBase.php",
      "https://phabricator.wikimedia.org/T422244"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "*",
        "lessThan": "1.46.0, 1.45.4, 1.44.6, 1.43.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
phabricator	www.phabricator.wikimedia.org/T422244

01 Jul 2026 17:16Current

CVSS 45.9

SSVC