{"id":"CVE-2026-103441","published":"2026-09-30T16:17:09.860","lastModified":"2026-09-30T16:27:40.143","description":"Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files.\n\nThis issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://gerrit.wikimedia.org/r/q/Id35bf747e48370e474d9b9444bd7520b24836e8d","tags":[]},{"url":"https://phabricator.wikimedia.org/T435210","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}