CVE-2026-5266

Vulnerability Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo.

This vulnerability is associated with program files includes/Api/ApiEchoNotifications.Php.

This issue affects Echo: from * before 1.43.7, 1.44.4, 1.45.2.

Vulnerability Details

Published Date

May 11, 2026

Last Modified

May 12, 2026

CWE ID

CWE-200

Source

NVD

External References

https://phabricator.wikimedia.org/T420154

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment