CVE-2026-100240

The Mediawiki - TemplateSandbox Extension prior to versions 1.46.1, 1.45.5, and 1.43.10 contains a missing authorization vulnerability that allows unauthorized access to functionalities not properly constrained by Access Control Lists (ACLs). This could lead to potential exploitation by attackers to manipulate or access sensitive features within the application. Organizations using affected versions of Mediawiki should prioritize patching to mitigate the risk of unauthorized access.