CVE-2026-126562

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-126562
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126562.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-126562
Aliases
  • GHSA-jwx8-mm92-gv95
Published
2026-11-11T02:35:58Z
Modified
2026-11-12T02:48:34Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter
Details

Semantic MediaWiki 3.0.0 before 7.4.1 contains an uncontrolled recursion vulnerability in the ElasticStore ConceptDescriptionInterpreter that only detects directly self-referencing concepts. Users with page-edit rights can create mutually referencing concept pages, causing concept page views, Special:Ask, or api.php action=ask queries to exhaust PHP memory or stack.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-674"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126562.json"
}
References

Affected packages

Git / github.com/semanticmediawiki/semanticmediawiki

Affected ranges

Type
GIT
Repo
https://github.com/semanticmediawiki/semanticmediawiki
Events
Introduced
abdec882fc57dd5b54cab15e8f419056164ee66a
Fixed
bcc3cbf4884f0474232a68d3eff060f93a506379
Fixed
35d8f8c9c7b48a476751ca0b795b78b648756828
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "7.4.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "35d8f8c9c7b48a476751ca0b795b78b648756828"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "7.4.1",
            "range": [
                {
                    "fixed": "bcc3cbf4884f0474232a68d3eff060f93a506379"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

3.*
3.0.0
3.1.0
3.1.0-rc.1
3.2.0
3.2.0-rc.1
3.2.0-rc.2
4.*
4.0.0
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.1.3
4.2.0
5.*
5.0.0
5.0.1
5.0.2
5.1.0
6.*
6.0.0
6.0.1
7.*
7.0.0
7.1.0
7.2.0
7.2.1
7.3.0
7.3.1
7.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126562.json"