CVE-2026-126991 SPARQL Injection in MISP Wikidata Lookup Module via Unescaped User Input

The Wikidata Lookup expansion module wiki.py in MISP misp-modules contained a SPARQL injection vulnerability. The handler function constructed a SPARQL query by directly concatenating the user-supplied text value into the query string without any escaping or parameterization: 'SELECT ?item WHERE...

CVE-2026-126991

The MISP Wikidata Lookup module (specifically wiki.py) in misp-modules contains a SPARQL injection vulnerability. The issue stems from the handler function directly concatenating user-supplied text into a SPARQL query without escaping or parameterization. An authenticated user with module access ...