CVE-2026-34086

Publication date 11 May 2026

Last updated 10 July 2026

Ubuntu priority

Description

Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2.

Show unmaintained releases

Package	Ubuntu Release	Status
mediawiki	26.04 LTS resolute	Needs evaluation
	25.10 questing	Ignored end of life, was needs-triage
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Needs evaluation
	18.04 LTS bionic	Needs evaluation

CVSS version: CVSS v4.0

Base score 2.1 · Low

Base metrics

Parameter	Value
Attack vector	Network
Attack complexity	High
Attack requirements	Present
Privileges required	Low
User interaction	Passive
Vulnerable system - Confidentiality impact	Low
Vulnerable system - Integrity impact	Low
Vulnerable system - Availability impact	None
Subsequent system - Confidentiality impact	Low
Subsequent system - Integrity impact	Low
Subsequent system - Availability impact	None

Scores

Parameter	Value
Base score	2.1 · Low
Base + Threat score	-
Base + Environmental score	-
Base + Threat + Environmental score	-

Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/S:N/AU:Y