{"id":"CVE-2026-100379","published":"2026-09-25T21:17:21.910","lastModified":"2026-09-28T16:38:10.183","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies.\n\nThis issue affects Wikipedia Android App: main.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-200"],"vendors":[],"products":[],"references":[{"url":"https://github.com/wikimedia/apps-android-wikipedia/pull/6768","tags":[]},{"url":"https://phabricator.wikimedia.org/T433832","tags":[]}],"exploitRefs":[{"url":"https://github.com/wikimedia/apps-android-wikipedia/pull/6768","tags":[]}],"hasPoc":true,"ai":null}