CVE-2026-126991 | MISP misp-modules up to 3.1.4 Wikidata Lookup expansion module wiki.py text code injection

November 12, 2026 Yanac

A vulnerability was found in MISP misp-modules up to 3.1.4. It has been declared as critical. The affected element is an unknown function of the file wiki.py of the component Wikidata Lookup expansion module. Executing a manipulation of the argument text can lead to code injection.

This vulnerability appears as CVE-2026-126991. The attack may be performed from remote. There is no available exploit.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More