Resource Exhaustion in Semantic MediaWiki Versions by Semantic MediaWiki

CVE-2026-116878

What is CVE-2026-116878?

The Semantic MediaWiki software versions prior to 7.3.1 are susceptible to an uncontrolled resource consumption vulnerability. This vulnerability arises when an attacker, by providing a limit value of zero to the Special:PropertyLabelSimilarity feature, can induce excessive resource consumption. This is triggered through repeated requests that bypass SQL LIMIT restrictions and lead to extensive pairwise comparisons via the similar_text() function. Consequently, this can result in significant CPU and memory exhaustion, ultimately impacting the performance and availability of the affected Semantic MediaWiki instances, allowing for potential service disruption.

References