Vulnerability Description
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from * before 3.7.
Related Weaknesses (CWE)
References
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ExternalData/+/1326012
- https://phabricator.wikimedia.org/T434961
FAQ
What is CVE-2026-100382?
CVE-2026-100382 is a documented vulnerability. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This i...
How severe is CVE-2026-100382?
CVSS scoring is not yet available for CVE-2026-100382. Check NVD for updates.
Is there a patch for CVE-2026-100382?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.