Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

CVE-2026-58025: MediaWiki allows unauthorized data to be executed.

CVE-2026-58025
Summary

MediaWiki, a popular wiki software, has a security issue that could allow attackers to execute unauthorized code. This affects older versions of MediaWiki, so it's essential to update to the latest version to prevent potential attacks. Update MediaWiki to the latest version to ensure your wiki remains secure.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versions
mediawiki mediawiki >= 1.43.0, < 1.43.9
>= 1.44.0, < 1.44.6
>= 1.45.0, < 1.45.4
1.46.0
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Original title
Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevisi...
Original description
Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki.

This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php.



This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
nvd CVSS4.0 5.9
Vulnerability type
CWE-94 Code Injection
CWE-502 Deserialization of Untrusted Data
Published: 1 Jul 2026 · Updated: 23 Jul 2026 · First seen: 1 Jul 2026