PT-2026-1964 · Unknown · Mediawiki - Visual Data Extension

Radman Siddiki · Published 2026-01-07 · Updated 2026-01-07 · CVE-2026-0668

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions MediaWiki - VisualData Extension version 1.45

Description An inefficient regular expression complexity issue exists in the MediaWiki - VisualData Extension. This allows for a Regular Expression Exponential Blowup, potentially leading to a denial of service. The issue is triggered by crafted user input.

Recommendations Update MediaWiki - VisualData Extension to a version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-1333

Related Identifiers

CVE-2026-0668

Affected Products

Mediawiki - Visual Data Extension

References · 9

• 🔥 https://phabricator.wikimedia.org/T387008 · Exploit
• https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8 · Patch
• https://osv.dev/vulnerability/CVE-2026-0668 · Vendor Advisory
• https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf · Patch
• https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5 · Patch
• https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-0668 · Security Note
• https://t.me/CVEtracker/41615 · Telegram Post
• https://twitter.com/CVEnew/status/2008959502285262947 · Twitter Post