๐Ÿ” CVE Alert

CVE-2026-34086

UNKNOWN 0.0

AbuseFilter misuses ::userCanBitfield, exposing access-controlled information

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

Vendor wikimedia foundation
Product abusefilter
Published May 11, 2026
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for wikimedia foundation abusefilter

Be the first to know when new unknown vulnerabilities affecting wikimedia foundation abusefilter are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Wikimedia Foundation / AbuseFilter
* < 1.43.7, 1.44.4, 1.45.2

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
phabricator.wikimedia.org: https://phabricator.wikimedia.org/T415584