CVE-2026-5266

Published: Mag 11, 2026 Last Modified: Mag 11, 2026

ExploitDB:

Other exploit source:

Google Dorks:

LOW 2,3

Source: c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Attack Vector: network

Attack Complexity: low

Privileges Required: low

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo.

This vulnerability is associated with program files includes/Api/ApiEchoNotifications.Php.

This issue affects Echo: from * before 1.43.7, 1.44.4, 1.45.2.

200

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Confidentiality

Potential Impacts:

Read Application Data

Technologies: Mobile, Not Technology-Specific, Web Based

Likelihood of Exploit: High