CVE-2026-5762: Wikimedia Foundation Mediawiki - Reportincident Extension

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Allocation of resources without limits or throttling vulnerability in Wikimedia Foundation MediaWiki - ReportIncident Extension allows HTTP DoS. This issue was remediated only on the `master` branch.

Affected products

• Wikimedia Foundation Mediawiki - Reportincident Extension: before 1.43 (fixed in 1.43); version 1.43 only; version 1.44 only; version 1.45 only

Published 2026-04-07. Last modified 2026-07-21.