Resource Consumption Flaw in Semantic MediaWiki Affects Multiple Versions

CVE-2026-116877

What is CVE-2026-116877?

Semantic MediaWiki versions prior to 7.3.1 exhibit an uncontrolled resource consumption vulnerability that permits low-privileged editors to bypass restrictions on the maximum number of recurring events. By providing excessively large limit parameters, attackers can exploit the #set_recurring_event feature, generating numerous date subobjects without an end date. This can potentially drain CPU, memory, and database resources, leading to significant performance issues and denial of service.

References