VulnSocial

CVE-2026-8857PoC(mediawiki / mediawiki)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Prioritize remediation for mediawiki mediawiki systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

mediawiki CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mediawiki

Threat summary

  • Public PoC and exploit tooling are both present
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-11-02)
  • 4 total mentions across 3 days

Affected systems

Vendors
mediawiki
Products
mediawiki

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-07: 1Mentions · 2026-08-13: 1Mentions · 2026-11-02: 2PoC Mentioned / Linked · 2026-08-07: 1PoC Mentioned / Linked · 2026-08-13: 1Exploit Tool / Code · 2026-08-07: 1Technical Details · 2026-08-07: 1Technical Details · 2026-08-13: 108-0708-1311-02
Signal classification2 categories
PoC
150.0%
Disclosure
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-071
PoC1
2026-08-131
Disclosure1
Full discourse4 posts
  • Geekboy@emgeekboy
    PoC

    reproducing the MediaWiki RCE (CVE-2026-8857) with Neo - https://neo.projectdiscovery.io/share/b8770ade-4aef-44f3-8fad-085d4b4c173a?taskView=canvas

    Post summary

    The post announces a Proof‑of‑Concept demonstration of the MediaWiki RCE (CVE‑2026‑8857) using the Neo framework, providing a link to the reproduction.

    27028113.9K
    26.4K followersView on X
  • Jacob Baines@Junior_Baines

    Initial Access Community Monday release! Two new exploits: CVE-2026-92122, a Jenkins Groovy sandbox escape, and CVE-2026-8857, a MediaWiki command injection. Both include Docker labs, PCAPs, detection rules, and ASM queries. https://github.com/vulncheck-oss/initial-access-community

    241841.1K
    4.2K followersView on X
  • Spencer McIntyre@zeroSteiner

    New this week in our initial access community feed: detections + exploits for CVE-2026-8857 (MediaWiki EasyTimeline RCE) and CVE-2026-92122 (Jenkins Script Security Plugin sandbox bypass RCE). https://github.com/vulncheck-oss/initial-access-community

    00053747
    2.8K followersView on X
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-8857 - high 🚨 MediaWiki EasyTimeline - Code Injection RCE > MediaWiki EasyTimeline (Timeline) extension versions before 1.46.0, 1.45.4, 1.44.6, a... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-8857 @pdnuclei #NucleiTemplates #cve

    Post summary

    The message announces the discovery of CVE‑2026‑8857, a code injection RCE flaw in MediaWiki EasyTimeline extensions before specified releases, and provides a link to a Nuclei template for detection.

    01052450
    1.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmediawikimediawiki---

Explore more

Back to dashboardmediawiki CVEsmediawiki vulnerabilities