CVE-2026-5266 is a vulnerability in Wikimedia Foundation Echo that allows exposure of sensitive information to unauthorized actors. It affects Echo versions before 1.43.7, 1.44.4, and 1.45.2. The issue is linked to the file includes/Api/ApiEchoNotifications.Php. The vulnerability has a low severity score of 2.3.