{"cvss":10.0,"datePublished":"","dateUpdated":"","description":"Unauthenticated remote code execution through wikitext in ExternalData | Affected: Wikimedia / Mediawiki - ExternalData Extension | CVSS: 10.0 (CRITICAL) | EPSS: 0.00947 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-100382","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Mediawiki - ExternalData Extension","severity":"CRITICAL","source":"circl_kev","title":"CVE-2026-100382","vendor":""}