Wikimedia Foundation Vector vulnerabilities

2 CVEs affecting Wikimedia Foundation Vector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-61657, published 2026-02-03.

More from Wikimedia Foundation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-6596, published 2026-02-02. None severity, CVSS 0.0. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files…
• CVE-2025-61657, published 2026-02-03. None severity, CVSS 0.0. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files…