semantic mediawiki vulnerabilities and fixes
Recent CVEs affecting semantic mediawiki, with upgrade or downgrade steps. 7 tracked.
Also searched as: semanticmediawiki.
semantic mediawiki has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-10-27. Highest priority: CVE-2026-116892 (score 29/100).
- CVE-2026-116892 MEDIUM 6.1 UPGRADE SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows
- CVE-2026-116891 MEDIUM 6.1 UPGRADE SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows
- CVE-2026-116889 MEDIUM 6.1 UPGRADE SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows use
- CVE-2026-116888 MEDIUM 4.8 UPGRADE SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows use
- CVE-2026-116884 MEDIUM 6.1 UPGRADE SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tool
- CVE-2026-116875 MEDIUM 6.1 UPGRADE SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:A
- CVE-2026-116874 MEDIUM 6.1 UPGRADE SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows
FAQ
How do I fix semantic mediawiki vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is semantic mediawiki being exploited right now?
None of the tracked semantic mediawiki CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which semantic mediawiki CVE should I patch first?
CVE-2026-116892 currently ranks highest (29/100): SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows .