CVE-2026-100382 | Wikimedia ExternalData Plugin up to 3.6 os command injection

A vulnerability marked as critical has been reported in Wikimedia ExternalData Plugin up to 3.6. Affected by this issue is some unknown functionality of the component ExternalData. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-100382. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More