All vulnerabilities
CVE-2026-100379

Cross-request disclosure of CentralAuth cookies in Wikipedia Android App

Wikimedia Foundation Wikipedia Android App
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 24% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
Published25 Sep 2026Updated 26 Sep 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies.

This issue affects Wikipedia Android App: main.

Text from CVE List

Affected versions 1

  • Wikipedia Android Appaffected: mainCVE List

References 2