CVE-2026-0668

Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3	Patch
https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5	Patch
https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf	Patch
https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8	Patch
https://phabricator.wikimedia.org/T387008	Exploit Issue Tracking

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:wikisphere:visualdata:-:*:*:*:*:mediawiki:*:*

cpe:2.3:a:mediawiki:mediawiki:1.45.0:*:*:*:*:*:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de complejidad de expresiones regulares ineficiente en la extensión VisualData de Wikimedia Foundation MediaWiki permite la explosión exponencial de expresiones regulares. Este problema afecta a la extensión VisualData de MediaWiki: 1.45.

Information

Published : 2026-01-07 18:15

Updated : 2026-10-26 21:10

NVD link : CVE-2026-0668

Mitre link : CVE-2026-0668

CVE.ORG link : CVE-2026-0668

JSON object : View

Products Affected

mediawiki

mediawiki

wikisphere

visualdata

CWE

CWE-1333

Inefficient Regular Expression Complexity

{"id": "CVE-2026-0668", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0668", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-07T19:17:04.191560Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "affectedData": [{"repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/VisualData", "vendor": "Wikimedia Foundation", "product": "MediaWiki - VisualData Extension", "versions": [{"status": "affected", "version": "1.45"}], "defaultStatus": "unaffected"}]}], "published": "2026-01-07T18:15:52.873", "references": [{"url": "https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3", "tags": ["Patch"], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}, {"url": "https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5", "tags": ["Patch"], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}, {"url": "https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf", "tags": ["Patch"], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}, {"url": "https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8", "tags": ["Patch"], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}, {"url": "https://phabricator.wikimedia.org/T387008", "tags": ["Exploit", "Issue Tracking"], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45."}, {"lang": "es", "value": "Vulnerabilidad de complejidad de expresiones regulares ineficiente en la extensi\u00f3n VisualData de Wikimedia Foundation MediaWiki permite la explosi\u00f3n exponencial de expresiones regulares. Este problema afecta a la extensi\u00f3n VisualData de MediaWiki: 1.45."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wikisphere:visualdata:-:*:*:*:*:mediawiki:*:*", "vulnerable": true, "matchCriteriaId": "AAD8093D-9F46-4862-A655-14560FD2297E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.45.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE14F82E-8C8A-43F0-9A96-D3767A62DFC8"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}