CVE-2026-100241: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Wikimedia Foundation Mediawiki - EventBus Extension
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha.
AI Analysis
Technical Summary
The vulnerability identified as CVE-2026-100241 affects the Mediawiki EventBus Extension version 1.47.0-alpha developed by the Wikimedia Foundation. It involves the exposure of sensitive information to unauthorized actors, categorized under CWE-200. The technical details do not include a CVSS score or detailed exploit information. No patch or remediation guidance is currently provided.
Potential Impact
The impact of this vulnerability is the unauthorized disclosure of sensitive information. This could potentially lead to information leakage that may aid attackers in further attacks or compromise user privacy. However, no active exploitation or specific impact scenarios are documented.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users of Mediawiki EventBus Extension version 1.47.0-alpha should monitor official Wikimedia Foundation advisories for updates and consider restricting access to the affected extension until a fix is available.
CVE-2026-100241: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Wikimedia Foundation Mediawiki - EventBus Extension
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha.
Affected software
Wikimedia Foundation
Mediawiki - EventBus Extension
pkg:github/wikimedia/mediawiki-eventbus-extensionRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability identified as CVE-2026-100241 affects the Mediawiki EventBus Extension version 1.47.0-alpha developed by the Wikimedia Foundation. It involves the exposure of sensitive information to unauthorized actors, categorized under CWE-200. The technical details do not include a CVSS score or detailed exploit information. No patch or remediation guidance is currently provided.
Potential Impact
The impact of this vulnerability is the unauthorized disclosure of sensitive information. This could potentially lead to information leakage that may aid attackers in further attacks or compromise user privacy. However, no active exploitation or specific impact scenarios are documented.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users of Mediawiki EventBus Extension version 1.47.0-alpha should monitor official Wikimedia Foundation advisories for updates and consider restricting access to the affected extension until a fix is available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- wikimedia-foundation
- Date Reserved
- 2026-09-25T16:02:34.842Z
- State
- PUBLISHED
Threat ID: 6abbeaabe94738e05c4dd189
Added to database: 09/29/2026, 16:43:23 UTC
Last enriched: 09/29/2026, 16:57:34 UTC
Last updated: 09/29/2026, 18:20:12 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.