critical10.0
CVE-2026-100382
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Exten…
Impact
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from * before 3.7.
Affected products
| Product | Affected versions |
|---|---|
| Mediawiki - ExternalData Extension: From * | before 3.7. |
Versions were read from the advisory text. No structured product data has been published for this record yet.