Resource Consumption Vulnerability in Wikimedia Foundation Mediawiki DataTransfer Extension
CVE-2026-100242

Currently unrated

Key Information:

Vendor
CVE Published:
29 September 2026

What is CVE-2026-100242?

A resource consumption issue has been identified in the Mediawiki DataTransfer Extension, linked to vulnerabilities in a third-party component. This flaw enables excessive resource allocation, potentially leading to degraded service performance or denial of service conditions for users. The affected versions include 1.46.0 and earlier, up to but not including 1.47.0.

Affected Version(s)

Mediawiki - DataTransfer Extension 1.46.0 < 1.47.0

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

AKulbii
.