CVE-2026-96879

Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.

Score

CVSS 4.0 6.9 Medium

Status

Awaiting Analysis - c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Published

2026-09-25

Last modified

2026-09-29

Weaknesses

CWE-212

Affected products

• Mediawiki - Flaggedrevs Extension (The Wikimedia Foundation)

References

• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FlaggedRevs/+/1344737
• https://phabricator.wikimedia.org/T433020