PT-2026-33200 · Wikimedia Foundation+2 · Abusefilter+1

Published 2026-04-03 · Updated 2026-05-11 · CVE-2026-34086

Positive Technologies (AI Summary)

CVSS v4.0

2.1

Low

Base vector

AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AbuseFilter versions prior to 1.43.7 AbuseFilter versions prior to 1.44.4 AbuseFilter versions prior to 1.45.2

Description A security issue exists in the Wikimedia Foundation AbuseFilter.

Recommendations Update to version 1.43.7 or later. Update to version 1.44.4 or later. Update to version 1.45.2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-34086

Affected Products

Abusefilter

Mediawiki

References · 12

• https://ubuntu.com/security/CVE-2026-34086 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-34086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34086 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34086 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34086 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-34086 · Security Note
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265611 · Note
• https://phabricator.wikimedia.org/T415584 · Note
• https://lists.wikimedia.org/hyperkitty/list/[e-mail]/thread/DIBLSBHISKX6NFRUFNOGZRVW42E7R2QP · Note
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265634 · Note
• http://phabricator.wikimedia.org/T415584 · Note
• https://twitter.com/CVEnew/status/2053954473219821684 · Twitter Post