CVE-2026-0668

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0668", "assignerOrgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "state": "PUBLISHED", "assignerShortName": "wikimedia-foundation", "dateReserved": "2026-01-07T16:34:59.342Z", "datePublished": "2026-01-07T17:36:19.258Z", "dateUpdated": "2026-01-07T19:17:41.764Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "MediaWiki - VisualData Extension", "repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/VisualData", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "1.45"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Radman Siddiki"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.<p>This issue affects MediaWiki - VisualData Extension: 1.45.</p>"}], "value": "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45."}], "impacts": [{"capecId": "CAPEC-492", "descriptions": [{"lang": "en", "value": "CAPEC-492 Regular Expression Exponential Blowup"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1333", "description": "CWE-1333 Inefficient Regular Expression Complexity", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "shortName": "wikimedia-foundation", "dateUpdated": "2026-01-07T17:36:19.258Z"}, "references": [{"url": "https://phabricator.wikimedia.org/T387008"}, {"url": "https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf"}, {"url": "https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8"}, {"url": "https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5"}, {"url": "https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3"}], "source": {"discovery": "UNKNOWN"}, "title": "VisualData extension: Regular Expression Denial of Service (ReDoS) via crafted user input", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-07T19:17:04.191560Z", "id": "CVE-2026-0668", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-07T19:17:41.764Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0668", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-07T19:17:04.191560Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-07T19:17:16.412Z"}}], "cna": {"title": "VisualData extension: Regular Expression Denial of Service (ReDoS) via crafted user input", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Radman Siddiki"}], "impacts": [{"capecId": "CAPEC-492", "descriptions": [{"lang": "en", "value": "CAPEC-492 Regular Expression Exponential Blowup"}]}], "affected": [{"repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/VisualData", "vendor": "Wikimedia Foundation", "product": "MediaWiki - VisualData Extension", "versions": [{"status": "affected", "version": "1.45"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://phabricator.wikimedia.org/T387008"}, {"url": "https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf"}, {"url": "https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8"}, {"url": "https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5"}, {"url": "https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45.", "supportingMedia": [{"type": "text/html", "value": "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.<p>This issue affects MediaWiki - VisualData Extension: 1.45.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1333", "description": "CWE-1333 Inefficient Regular Expression Complexity"}]}], "providerMetadata": {"orgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "shortName": "wikimedia-foundation", "dateUpdated": "2026-01-07T17:36:19.258Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0668", "state": "PUBLISHED", "dateUpdated": "2026-01-07T19:17:41.764Z", "dateReserved": "2026-01-07T16:34:59.342Z", "assignerOrgId": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "datePublished": "2026-01-07T17:36:19.258Z", "assignerShortName": "wikimedia-foundation"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "MediaWiki - VisualData Extension", "repo": "https://gerrit.wikimedia.org/g/mediawiki/extensions/VisualData", "vendor": "Wikimedia Foundation", "versions": [{"status": "affected", "version": "1.45"}]}], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wikisphere:visualdata:-:*:*:*:*:mediawiki:*:*", "matchCriteriaId": "AAD8093D-9F46-4862-A655-14560FD2297E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.45.0:*:*:*:*:*:*:*", "matchCriteriaId": "EE14F82E-8C8A-43F0-9A96-D3767A62DFC8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45."}, {"lang": "es", "value": "Vulnerabilidad de complejidad de expresiones regulares ineficiente en la extensi\u00f3n VisualData de Wikimedia Foundation MediaWiki permite la explosi\u00f3n exponencial de expresiones regulares. Este problema afecta a la extensi\u00f3n VisualData de MediaWiki: 1.45."}], "id": "CVE-2026-0668", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0668", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-07T19:17:04.191560Z", "version": "2.0.3"}}]}, "published": "2026-01-07T18:15:52.873", "references": [{"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Patch"], "url": "https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3"}, {"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Patch"], "url": "https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5"}, {"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Patch"], "url": "https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf"}, {"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Patch"], "url": "https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8"}, {"source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "tags": ["Exploit", "Issue Tracking"], "url": "https://phabricator.wikimedia.org/T387008"}], "sourceIdentifier": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1333"}], "source": "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc", "type": "Secondary"}]}

{"bugzilla": {"description": "MediaWiki: MediaWiki VisualData Extension: Denial of Service via inefficient regular expression", "id": "2427616", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427616"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1333", "details": ["A flaw was found in Wikimedia Foundation MediaWiki - VisualData Extension. A remote attacker could exploit an inefficient regular expression, leading to a Regular Expression Denial of Service (ReDoS). This vulnerability allows an attacker to provide specially crafted input that causes the regular expression engine to consume excessive processing time, resulting in a denial of service for the affected system."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, disable the VisualData extension in MediaWiki if it is not essential for your deployment. This can typically be done by commenting out or removing the `wfLoadExtension('VisualData');` line in `LocalSettings.php`. A restart of the web server or PHP-FPM service may be required for the changes to take effect."}, "name": "CVE-2026-0668", "public_date": "2026-01-07T17:36:19Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-0668\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-0668\nhttps://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3\nhttps://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5\nhttps://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf\nhttps://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8\nhttps://phabricator.wikimedia.org/T387008"], "statement": "This vulnerability is rated Moderate for Red Hat. The MediaWiki VisualData Extension is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. Exploitation requires an attacker to provide crafted user input, which can lead to a denial of service by consuming excessive resources. This issue affects MediaWiki - VisualData Extension version 1.45.", "threat_severity": "Moderate"}

{"analysis": {"en": {"generated_at": "2026-04-18T08:01:04.449741+00:00", "value": {"mitigation_remediation": ["Upgrade the VisualData Extension to the latest version that resolves the regular expression issue.", "Sanitize or validate any user input that is processed by the extension to ensure that regular expression patterns are not excessively complex or unbounded.", "Deploy a web application firewall or rate\u2011limit resource usage to detect and block repetitive heavy requests that could indicate a ReDoS attempt."], "summary": {"action": "Immediate Patch", "impact": "Denial of Service (ReDoS)"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Wikimedia Foundation\u2019s MediaWiki VisualData Extension, version 1.45.0. Any installation running this extension\u2014and potentially any higher versions that have not applied the fix\u2014could be compromised. The affected CPE identifiers include mediawiki:mediawiki:1.45.0 and wikisphere:visualdata:mediawiki.", "description_and_impact": "The VisualData Extension for MediaWiki contains an inefficient regular expression that can trigger exponential blowup when processing crafted input. This flaw, identified as CWE\u20111333, allows an attacker to supply a specially structured string that causes the server to consume excessive CPU resources, leading to a denial\u2011of\u2011service condition for the entire MediaWiki application.", "risk_and_exploitability": "The CVSS v3.1 base score is 5.3, indicating a moderate severity. The EPSS rating is less than 1\u202f%, suggesting that exploitation is unlikely at present. The vulnerability is not listed in the CISA KEV catalog. Since the flaw is triggered by crafted user input, the likely attack vector is remote via HTTP requests that include malicious content parsed by the extension. An attacker could target a publicly exposed MediaWiki instance, causing a denial\u2011of\u2011service that impacts availability for all users."}}}}, "created": "2026-01-08T09:48:00.302637+00:00", "updated": "2026-04-18T08:15:15.882691+00:00", "vendors": ["mediawiki", "mediawiki$PRODUCT$mediawiki", "wikimedia", "wikimedia$PRODUCT$mediawiki-visualdata_extension"]}