Skip to content

CVE-2026-100240 TemplateSandbox does not check read permissions for the page being previewed

CriticalCVSS 9.1 EPSS 0.30%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

Affected products

ProductAffected versionsFixed in
Wikimedia Foundation Mediawiki - TemplateSandbox Extension < 1.46.1, 1.45.5, 1.43.10 1.46.1, 1.45.5, 1.43.10

References