CVE-2026-103440CWE-202

CVE-2026-103440

published September 30, 2026

CVSS
1.2
EPSS
0%
Percentile
18.5
In the wild
Unconfirmed
What it is

Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation.

This issue affects MediaWiki PageTriage extension: 1.46, 1.45, and 1.43.

The record
Technical detail
CVSS
1.2 · NONE
CVSS v4.0
1.2 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber
EPSS
0.00272 · 18.5th percentile
Weakness
CWE-202 · Exposure of Sensitive Information Through Data Queries
Published
2026-09-30T22:18Z
References (2)
https://gerrit.wikimedia.org/r/q/I4bdd5f5be95ed5d02c504784fb31da4e5de59da6 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacchttps://phabricator.wikimedia.org/T435623 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
EPSS history
Timeline
  • 02 OCT 03:41Z
    EPSS moved — → 0%
    epss
  • 30 SEP 17:38Z
    pagetriagelist discloses suppressed reviewer usernames
    cvelistv5