CVE-2026-100240

Summary

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Affected Software

VendorProductVersion RangeStatus
Wikimedia FoundationMediawiki - TemplateSandbox Extension* < 1.46.1, 1.45.5, 1.43.10affected

Weaknesses

  • CWE-862: CWE-862 Missing Authorization

References