CVE-2026-116872 in Semantic MediaWiki
Zusammenfassung
von MITRE • 27.10.2026
Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:(...) or has:(...) expressions to Special:Search to exhaust PHP search workers when the extended search engine is enabled.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.