Incorrect Authorization Vulnerability in Semantic MediaWiki by Semantic MediaWiki

CVE-2026-126566

What is CVE-2026-126566?

Semantic MediaWiki versions 7.3.1 and earlier expose a flaw in the EditProtectionUpdater component, which inadequately verifies the authorization status of users attempting to change protection settings on pages. This vulnerability allows editors to inadvertently or maliciously alter edit protection by embedding specific annotations in transcluded templates. As a result, modifications previously enforced by administrators could be removed, thereby undermining the integrity of page protection mechanisms.

References