Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-58029

Fixed in a distro release EPSS <1%CVSS 5.3

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Published 2026-07-01 · CVE record · OSV

Products: Wikimedia Foundation MediaWiki

Distro releases

ReleasePackageFixed in
Debian 12mediawikino fix
Debian 13mediawiki1:1.43.9+dfsg-1~deb13u1
Debian 14mediawiki1:1.43.9+dfsg-1
Ubuntu 18.04 LTSmediawikino fix
Ubuntu 25.10mediawikino fix
Ubuntu 26.04 LTSmediawikino fix
Ubuntu 26.10mediawikino fix
Ubuntu Pro 20.04 LTSmediawikino fix
Ubuntu Pro 22.04 LTSmediawikino fix
Ubuntu Pro 24.04 LTSmediawikino fix