Question 1

What is CVE-2026-100377 — CVE-2026-100377?

Accepted Answer

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

Question 2

What is the authoritative source for CVE-2026-100377?

Accepted Answer

CVE-2026-100377 (CVE-2026-100377) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.32% probability of exploitation · percentile 23.2% · 2026-10-05T12:00:23Z
Last modified	2026-09-28

CVE-2026-100377CVE-2026-100377

Description

Scoring