PT-2026-54634 · Wikimedia Foundation+1 · Url Shortener+1

Published

2026-07-01

·

Updated

2026-07-01

·

CVE-2026-13706

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Improper input validation vulnerability in Wikimedia Foundation UrlShortener.
This vulnerability is associated with program files includes/UrlShortenerUtils.Php.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-13706

Affected Products

Url Shortener
Mediawiki