A vulnerability was found in Wikimedia Echo up to 1.43.6/1.44.3/1.45.1 . It has been rated as problematic . This affects an unknown function of the file includes/Api/ApiEchoNotifications.Php . Performing a manipulation results in information disclosure. This vulnerability was named CVE-2026-5266 . The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.