Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-0668 Details

Description

Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3 wikimedia-foundationPatch
https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5 wikimedia-foundationPatch
https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf wikimedia-foundationPatch
https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8 wikimedia-foundationPatch
https://phabricator.wikimedia.org/T387008 wikimedia-foundationExploitIssue Tracking

Weakness Enumeration

CWE-IDCWE NameSource
CWE-1333Inefficient Regular Expression Complexitywikimedia-foundation

Affected Products

ProductVersions
wikisphere visualdata
All versions

CPE

  • cpe:2.3:a:wikisphere:visualdata:-:*:*:*:*:mediawiki:*:*

Remediation

  • No remediation found in references.
mediawiki mediawiki
1.45.0

CPE

  • cpe:2.3:a:mediawiki:mediawiki:1.45.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-0668
NVD Published Date:
Jan 7, 2026
NVD Last Modified:
Jun 17, 2026
Source:
wikimedia-foundation
CVE-2026-0668 Details - Not Deferred