CVE-2026-100240

Name of the Vulnerable Software and Affected Versions Mediawiki - TemplateSandbox Extension versions prior to 1.46.1 Mediawiki - TemplateSandbox Extension version 1.45.5 Mediawiki - TemplateSandbox Extension version 1.43.10

Description A missing authorization issue exists in the TemplateSandbox Extension, which allows access to functionality that is not properly constrained by Access Control Lists (ACLs). ACLs are sets of rules that define which users or systems are granted access to specific objects or functions.

Recommendations Update to a version later than 1.46.1. Update to a version later than 1.45.5. Update to a version later than 1.43.10.