# Semantic MediaWiki vulnerabilities Source: https://junglewise.ai/threats/technologies/semantic-mediawiki Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 04:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/semantic-mediawiki.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 29 vulnerabilities in Semantic MediaWiki: 7 in the last 7 days and 28 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-126566, was published on 11 November 2026. 12 vulnerabilities in the last four weeks, up 33% on the four before (9). ## Counts - Last 7 days: 7 - Last 30 days: 19 - Last 90 days: 28 - All time: 29 (0 critical, 0 exploited in the wild) ## About Semantic MediaWiki Semantic MediaWiki is an extension for MediaWiki that allows for the storage and retrieval of structured data within wiki pages. ## Latest Semantic MediaWiki vulnerabilities - [CVE-2026-126566: Semantic MediaWiki authorization bypass in edit protection](https://junglewise.ai/threats/cve-2026-126566-semantic-mediawiki-7-3-1-before-7-4-1-contains-an-incorrect) (high, CVSS 7.1, published 11 Nov 2026) - [CVE-2026-126565: Semantic MediaWiki denial of service in concept expansion](https://junglewise.ai/threats/cve-2026-126565-semantic-mediawiki-3-0-0-before-7-4-1-contains-a-denial-of) (medium, CVSS 4.3, published 11 Nov 2026) - [CVE-2026-126564: Semantic MediaWiki stored XSS in ValueFormatter property label](https://junglewise.ai/threats/cve-2026-126564-semantic-mediawiki-2-5-0-before-7-4-1-contains-a-stored-cross) (medium, CVSS 5.4, published 11 Nov 2026) - [CVE-2026-126562: Semantic MediaWiki uncontrolled recursion in ConceptDescriptionInterpreter](https://junglewise.ai/threats/cve-2026-126562-semantic-mediawiki-3-0-0-before-7-4-1-contains-an-uncontrolled) (medium, CVSS 4.3, published 11 Nov 2026) - [CVE-2026-126561: Semantic MediaWiki missing authorization in page edit protection](https://junglewise.ai/threats/cve-2026-126561-semantic-mediawiki-2-5-0-before-7-4-1-contains-a-missing) (high, CVSS 7.1, published 11 Nov 2026) - [CVE-2026-126560: Semantic MediaWiki stored cross-site scripting in DataTables](https://junglewise.ai/threats/cve-2026-126560-semantic-mediawiki-3-0-0-before-7-4-1-contains-a-stored-cross) (medium, CVSS 5.4, published 11 Nov 2026) - [CVE-2026-126559: Semantic MediaWiki stored cross-site scripting in FacetedSearch](https://junglewise.ai/threats/cve-2026-126559-semantic-mediawiki-4-2-0-before-7-4-1-contains-a-stored-cross) (medium, CVSS 4.8, published 11 Nov 2026) - [CVE-2026-116887: Semantic MediaWiki stored XSS in Special:Browse via Keyword property](https://junglewise.ai/threats/cve-2026-116887-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-stored) (medium, CVSS 5.4, published 27 Oct 2026) - [CVE-2026-116886: Semantic MediaWiki stored cross-site scripting in External identifier values](https://junglewise.ai/threats/cve-2026-116886-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-a-stored) (medium, CVSS 5.4, published 27 Oct 2026) - [CVE-2026-116885: Semantic MediaWiki reflected XSS in Special:SMWAdmin ID lookup](https://junglewise.ai/threats/cve-2026-116885-semantic-mediawiki-from-3-1-0-before-7-3-1-contains-a-reflected) (medium, CVSS 6.1, published 27 Oct 2026) - [CVE-2026-116882: Semantic MediaWiki stored XSS in FacetedSearch exploration labels](https://junglewise.ai/threats/cve-2026-116882-semantic-mediawiki-from-4-2-0-before-7-3-1-contains-a-stored) (medium, CVSS 4.8, published 27 Oct 2026) - [CVE-2026-116881: Semantic MediaWiki cross-site scripting in property-value autocomplete](https://junglewise.ai/threats/cve-2026-116881-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-cross-site) (medium, CVSS 6.1, published 27 Oct 2026) - [CVE-2026-116880: Semantic MediaWiki cross-site request forgery in Special:SMWAdmin](https://junglewise.ai/threats/cve-2026-116880-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-cross-site) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-116879: Semantic MediaWiki missing authorization in smwtask update](https://junglewise.ai/threats/cve-2026-116879-semantic-mediawiki-from-7-3-0-before-7-3-1-contains-a-missing) (medium, CVSS 5.4, published 27 Oct 2026) - [CVE-2026-116878: Semantic MediaWiki quadratic resource exhaustion in PropertyLabelSimilarity](https://junglewise.ai/threats/cve-2026-116878-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an) (high, CVSS 7.5, published 27 Oct 2026) - [CVE-2026-116877: Semantic MediaWiki uncontrolled resource consumption in recurring events](https://junglewise.ai/threats/cve-2026-116877-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an) (medium, CVSS 6.5, published 27 Oct 2026) - [CVE-2026-116876: Semantic MediaWiki improper authorization in page protection](https://junglewise.ai/threats/cve-2026-116876-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an-improper) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-116873: Semantic MediaWiki missing authorization in smwtask API](https://junglewise.ai/threats/cve-2026-116873-semantic-mediawiki-from-7-3-0-before-7-3-1-contains-a-missing) (high, CVSS 7.3, published 27 Oct 2026) - [CVE-2026-116872: Semantic MediaWiki algorithmic complexity in search parsing](https://junglewise.ai/threats/cve-2026-116872-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-an) (high, CVSS 7.5, published 27 Oct 2026) - [CVE-2026-77616: Semantic MediaWiki reflected XSS in Special:Ask cursor parameter](https://junglewise.ai/threats/cve-2026-77616-semantic-mediawiki-reflected-xss-in-special-ask-cursor-parameter) (medium, CVSS 6.1, published 18 Sep 2026) - [CVE-2026-77610: Semantic MediaWiki query debug output XSS in DebugFormatter](https://junglewise.ai/threats/cve-2026-77610-semantic-mediawiki-query-debug-output-xss-in-debugformatter) (medium, CVSS 6.1, published 18 Sep 2026) - [CVE-2026-77609: Semantic MediaWiki open redirect in Special:URIResolver](https://junglewise.ai/threats/cve-2026-77609-semantic-mediawiki-open-redirect-in-special-uriresolver) (medium, CVSS 6.1, published 18 Sep 2026) - [CVE-2026-77608: Semantic MediaWiki reflected XSS in SearchByProperty](https://junglewise.ai/threats/cve-2026-77608-semantic-mediawiki-reflected-xss-in-searchbyproperty) (medium, CVSS 6.1, published 18 Sep 2026) - [CVE-2026-77607: Semantic MediaWiki reflected XSS in Special:Ask separator parameter](https://junglewise.ai/threats/cve-2026-77607-semantic-mediawiki-reflected-xss-in-special-ask-separator) (medium, CVSS 6.1, published 18 Sep 2026) - [CVE-2026-77606: Semantic MediaWiki reflected XSS in Special:Ask plain table headers](https://junglewise.ai/threats/cve-2026-77606-semantic-mediawiki-reflected-xss-in-special-ask-plain-table) (medium, CVSS 6.1, published 18 Sep 2026) ## Most severe Semantic MediaWiki vulnerabilities - [CVE-2025-61682: Semantic MediaWiki stored XSS through wikitext data attributes](https://junglewise.ai/threats/cve-2025-61682-semantic-mediawiki-stored-xss-through-wikitext-data-attributes) (high, CVSS 8.6, published 18 Sep 2026) - [CVE-2026-116878: Semantic MediaWiki quadratic resource exhaustion in PropertyLabelSimilarity](https://junglewise.ai/threats/cve-2026-116878-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an) (high, CVSS 7.5, published 27 Oct 2026) - [CVE-2026-116872: Semantic MediaWiki algorithmic complexity in search parsing](https://junglewise.ai/threats/cve-2026-116872-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-an) (high, CVSS 7.5, published 27 Oct 2026) - [CVE-2026-116873: Semantic MediaWiki missing authorization in smwtask API](https://junglewise.ai/threats/cve-2026-116873-semantic-mediawiki-from-7-3-0-before-7-3-1-contains-a-missing) (high, CVSS 7.3, published 27 Oct 2026) - [Semantic MediaWiki missing authorization in smwtask API module](https://junglewise.ai/threats/semantic-mediawiki-missing-authorization-in-smwtask-api-module-37615b77) (high, CVSS 7.3, published 18 Sep 2026) - [CVE-2026-126566: Semantic MediaWiki authorization bypass in edit protection](https://junglewise.ai/threats/cve-2026-126566-semantic-mediawiki-7-3-1-before-7-4-1-contains-an-incorrect) (high, CVSS 7.1, published 11 Nov 2026) - [CVE-2026-126561: Semantic MediaWiki missing authorization in page edit protection](https://junglewise.ai/threats/cve-2026-126561-semantic-mediawiki-2-5-0-before-7-4-1-contains-a-missing) (high, CVSS 7.1, published 11 Nov 2026) - [CVE-2026-116880: Semantic MediaWiki cross-site request forgery in Special:SMWAdmin](https://junglewise.ai/threats/cve-2026-116880-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-cross-site) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-116876: Semantic MediaWiki improper authorization in page protection](https://junglewise.ai/threats/cve-2026-116876-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an-improper) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-116877: Semantic MediaWiki uncontrolled resource consumption in recurring events](https://junglewise.ai/threats/cve-2026-116877-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an) (medium, CVSS 6.5, published 27 Oct 2026) ## Vulnerabilities per week 12 vulnerabilities in the last four weeks, up 33% on the four before (9). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 9 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 12 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 7 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Semantic MediaWiki vulnerabilities", https://junglewise.ai/threats/technologies/semantic-mediawiki, 11 November 2026.