CVE-2026-126991

The MISP Wikidata Lookup module (specifically wiki.py) in misp-modules contains a SPARQL injection vulnerability. The issue stems from the handler function directly concatenating user-supplied text into a SPARQL query without escaping or parameterization. An authenticated user with module access ...