CVE-2026-77609

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `Special:URIResolver` resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to `$title->getFullURL()` without validating the resolved target. A crafted subpage can make that target point off-host: an interwiki prefix redirects to the foreign wiki (for example `Special:URIResolver/mw-3AFoo`, which decodes to `mw:Foo`, redirects to `https://www.mediawiki.org/wiki/Foo`), and where the resolved URL carries an authority the target can even embed `user:pass@host` credentials. The result is an open redirect to an attacker-influenced host, usable for phishing from a trusted wiki URL. Version 7.2.0 fixes the issue.

• CWE-601

• https://github.com/SemanticMediaWiki/SemanticMediaWiki/releases/tag/7.2.0
• https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-hw3m-8j5x-94ff

Published

Sep 18, 2026

Last Modified

Sep 24, 2026

Status

Awaiting Analysis

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-77601OpenC3 COSMOS provides the functionality needed to send comm…8.8
• CVE-2026-77602OpenC3 COSMOS provides the functionality needed to send comm…9.9
• CVE-2026-77605Notepad++ is a free and open-source source code editor. Prio…7.8
• CVE-2026-77606Semantic MediaWiki is a free, open-source extension to Media…6.1
• CVE-2026-77607Semantic MediaWiki is a free, open-source extension to Media…6.1
• CVE-2026-77608Semantic MediaWiki is a free, open-source extension to Media…6.1
• CVE-2026-7761The Ultimate Member plugin for WordPress is vulnerable to Ac…8.8
• CVE-2026-77610Semantic MediaWiki is a free, open-source extension to Media…6.1
• CVE-2026-77611SeaweedFS is a distributed storage system for files and blob…7.1
• CVE-2026-77614Opencast is a free, open-source platform to support the mana…8.8
• CVE-2026-77615Paella Player is a set of libraries to create a multi stream…8.7
• CVE-2026-77616Semantic MediaWiki is a free, open-source extension to Media…6.1