CVE-2026-96879: The Wikimedia Foundation Mediawiki - Flaggedrevs Extension

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.

Affected products

• The Wikimedia Foundation Mediawiki - Flaggedrevs Extension: up to and including 1.46.0

Published 2026-09-25. Last modified 2026-09-29.