CVE-2026-8857PoC(mediawiki / mediawiki)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for mediawiki mediawiki systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

mediawiki CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://phabricator.wikimedia.org/T426631

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mediawiki

Threat summary

Public PoC and exploit tooling are both present
2 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 2 signals
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-08-07); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

mediawiki

Products

mediawiki

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

PoC

150.0%

Disclosure

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-07	1	PoC1
2026-08-13	1	Disclosure1

Full discourse2 posts

Geekboy@emgeekboy46d
PoC
reproducing the MediaWiki RCE (CVE-2026-8857) with Neo - https://neo.projectdiscovery.io/share/b8770ade-4aef-44f3-8fad-085d4b4c173a?taskView=canvas
Post summary
The post announces a Proof‑of‑Concept demonstration of the MediaWiki RCE (CVE‑2026‑8857) using the Neo framework, providing a link to the reproduction.
27027113.8K
26.4K followersView on X
pdnuclei-bot@pdnuclei_bot39d
Disclosure
🚨 CVE-2026-8857 - high 🚨 MediaWiki EasyTimeline - Code Injection RCE > MediaWiki EasyTimeline (Timeline) extension versions before 1.46.0, 1.45.4, 1.44.6, a... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-8857 @pdnuclei #NucleiTemplates #cve
Post summary
The message announces the discovery of CVE‑2026‑8857, a code injection RCE flaw in MediaWiki EasyTimeline extensions before specified releases, and provides a link to a Nuclei template for detection.
01052449
1.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mediawiki	mediawiki	-	-	-

Explore more

Back to dashboard mediawiki CVEs mediawiki vulnerabilities