[🚨 #MediaWiki vulnerable extension]
If you are running a MediaWiki instance with Extension:External_Data < v3.7, your instance is vulnerable to arbitrary file loading and #RemoteCodeExecution.
The vulnerability was apparently publicly known since August, but due to the lack of communication, instance admins learned about it due to that vulnerability being exploited en masse.
If you know and like a MediaWiki instance, you can check their Special:Version page to see if they are using the External_Data extension to warn them.
More info:
- https://lists.wikimedia.org/hyperkitty/list/mediawiki-l@lists.wikimedia.org/thread/5N55R3XNFE7BXQLGWKZI7Q4ZXZSF4C5I/
- https://www.cve.org/CVERecord?id=CVE-2026-100382
#infosec #wikipedia #wikidata #adminsys #security #CVE #pwned
