The vulnerability of the MediaWiki hypertext environment’s implementation of the apiUserrights.php program involves allowing unauthorized access to protected information by attackers.

The vulnerability of the MediaWiki hypertext environment implementation, including the apiUserrights.php tool, is related to insufficient protection of operational data. Exploitation of this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

CVE-2026-58024

CVE-2026-58024 affects MediaWiki prior to 1.46.0 and some earlier 1.45.x/1.44.x/1.43.x branches. The issue is tied to includes/Api/ApiUserrights.Php, enabling exposure of sensitive information to unauthorized actors via the API. Reported metrics show a CVSSv4 base score of 5.1 (Medium) with netwo...

CVE-2026-58024: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUserrights.Php. This issue affects MediaWiki: from before 1.46.0, 1.45.4, 1.44.6, 1.43.9...