CVE-2026-5266
Echo API Exposure of Sensitive Information to Unauthorized Actors
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is associated with program files includes/Api/ApiEchoNotifications.Php. This issue affects Echo: from * before 1.43.7, 1.44.4, 1.45.2.
CVSS 4.0 · 2.3 Low
EPSS < 1%
KEV · Not listed
Vendors
Products