Open Redirect Vulnerability in Semantic MediaWiki Extension
CVE-2026-77609

6.1MEDIUM

Key Information:

Vendor

Semanticmediawiki

Status
Semanticmediawiki
Vendor
CVE Published:
18 September 2026

What is CVE-2026-77609?

Semantic MediaWiki, an open-source extension for MediaWiki, exhibits an open redirect vulnerability prior to version 7.2.0. Specifically, the Special:URIResolver feature allows user-controlled subpage resolution without validating the target. This flaw can enable malicious actors to craft a subpage that redirects users to an attacker-controlled URL, facilitating phishing attacks from a seemingly trusted wiki interface. Updated version 7.2.0 addresses and resolves this issue, ensuring better security for users.

Affected Version(s)

SemanticMediaWiki < 7.2.0

References

https://github.com/SemanticMediaWiki/SemanticMediaWiki/se...
x_refsource_CONFIRM
https://github.com/SemanticMediaWiki/SemanticMediaWiki/re...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.