CVE-2026-96872

DiscoveredSep 23, 2026UpdatedSep 24, 2026

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.

View graph Watch Export

CVSS v3.1

—

EPSS

0.35%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Sep 25, 2026 → Oct 26, 2026

▲ 0.12pp

0.23% → 0.35% over 2 tracked changes

Connections

1 relationships

CWE-280

source

Timeline

disclosure → media coverage

Sep 23, 2026

Disclosure — published as a CVE record.

Public PoC (1)

github.com/BomboBombone/CVE-2026-96872

Unverified third-party code — review before executing.