Wikimedia Foundation AbuseFilter

• CVE-2026-58027 Medium 5.3 QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI 0.4%
• CVE-2026-34086 Low 2.1 AbuseFilter misuses ::userCanBitfield, exposing access-controlled information 0.2%
• CVE-2025-6592 Low 2.1 Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog 0.4%