Denial of Service Vulnerability in Semantic MediaWiki by Semantic MediaWiki Team

CVE-2026-126565

What is CVE-2026-126565?

Semantic MediaWiki versions before 7.4.1 contain a denial of service vulnerability that arises when users with page-edit rights create acyclic chains of Concept pages. These chains re-expand concepts without proper memoization or an expansion budget, leading to excessive CPU and memory consumption during query processing. The vulnerability affects functionalities including concept page views and API queries, potentially destabilizing the server.

References