CVE-2026-96879: "Checked by" label in page history should not be shown if the underlying review log entry is suppressed"
Published Sep 25, 2026
·Updated
Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.
Affected Software
1 affected component
Wikimedia Foundation MediaWiki FlaggedRevs extension<=1.46.0
Event History
Sep 25, 2026
CVE Published
via MITRE·08:10 PM
Data Sourced
via MITRE·08:10 PM
DescriptionWeakness
Frequently Asked Questions
1
Which versions are in the reported affected range?
The reported affected range is MediaWiki's FlaggedRevs extension through version 1.46.0.
2
Which deployments should be reviewed first?
Review MediaWiki deployments using the FlaggedRevs extension, particularly where page history can display a "Checked by" label associated with suppressed review log entries.