PatchSiren

Mediawiki CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Mediawiki CVE published 2026-05-11

CVE-2026-34094

CVE-2026-34094 is a low-severity MediaWiki vulnerability affecting specific release branches before 1.43.7, 1.44.4, and 1.45.2. The NVD record points to Wikimedia’s Phabricator issue T416090 as the vendor advisory/patch reference. Based on the published CVSS v4.0 vector, exploitation is network-reachable but requires high privileges and some user interaction, with limited confidentiality impact and no lis [truncated]