CVE-2026-96872: The Wikimedia Foundation Mediawiki - Wikilambda Extension

Low severity, CVSS 2.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.

Affected products

• The Wikimedia Foundation Mediawiki - Wikilambda Extension: before 1.47.0 (fixed in 1.47.0)

Published 2026-09-23. Last modified 2026-09-24.