Vendor
high
advisory
Semantic MediaWiki: Missing authorization in smwtask API (CVE-2026-116873)
1 rule 2 TTPs 4 CVEsSemantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and force store updates.
Semantic MediaWiki +3
denial-of-service
web-application
cve
privilege-escalation
cms-security
vulnerability
authentication-bypass
1r
2t
4c
updated
high
threat
Unauthenticated Administrative Access in Semantic MediaWiki smwtask API
1 rule 1 TTPThe Semantic MediaWiki smwtask API module fails to enforce authorization, enabling unauthenticated remote attackers to perform sensitive information disclosure, queue administrative maintenance jobs, and manipulate stored semantic data.
exploited
Semantic MediaWiki +1
api-security
broken-access-control
webserver
web-security
xss
cms
1r
1t