中文

// CVE · PUBLISHED 2026-09-25

CVE-2026-100382

Wikimedia Foundation / Mediawiki - ExternalData Extension

10.0 · CVSS 4.0Critical

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from * before 3.7.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.