CVE-2026-34090

Published: Mag 11, 2026 Last Modified: Mag 11, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 4,8

Source: c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Attack Vector: network

Attack Complexity: low

Privileges Required: high

User Interaction: passive

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.

This issue affects CheckUser: from 1.45.0 before 1.45.2.

200

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Confidentiality

Potential Impacts:

Read Application Data

Technologies: Mobile, Not Technology-Specific, Web Based

Likelihood of Exploit: High