RCE in Wikimedia Foundation Mediawiki

CVE-2026-58025

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php…

Vulnerability class: RCE (Remote Code Execution)

Affected products

Weakness classification (CWE)

References