CVE-2026-100242

— UNSCOREDpublic exploit available

Published 2026-09-29 · Updated 2026-09-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0.

Weaknesses

CWE-400

Public exploit & PoC references

https://github.com/advisories/GHSA-xh5m-36r6-47m3

All references

https://gerrit.wikimedia.org/r/q/Ibc4a9070c2425b690bc767a882e4c35046a39be7
https://github.com/advisories/GHSA-xh5m-36r6-47m3
https://phabricator.wikimedia.org/T433275

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100527PoC
LOWCVE-2026-100542PoC
HIGHCVE-2026-100558PoC
MEDIUMCVE-2026-100571PoC
MEDIUMCVE-2026-100572PoC
MEDIUMCVE-2026-100648PoC
MEDIUMCVE-2026-100650PoC
MEDIUMCVE-2026-100651PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.