Advisories · Technology

Apache Software Foundation Apache Cocoon.

Every CVE that names Apache Software Foundation Apache Cocoon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108089 CVE record

CVSS 7.5 High

Apache Cocoon: Unauthenticated access to diagnostic interfaces
- Apache Software Foundation Apache Cocoon
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-108088 CVE record

CVSS 7.5 High

Apache Cocoon: Cross-user cache poisoning
- Apache Software Foundation Apache Cocoon
- CWE-524
Not analysed yet 20 Oct 2026
CVE-2026-108087 CVE record

CVSS 8.8 High

Apache Cocoon: SQL Injection
- Apache Software Foundation Apache Cocoon
- SQL injection
Not analysed yet 20 Oct 2026
CVE-2026-108086 CVE record

CVSS 7.5 High

Apache Cocoon: XEE could lead to SSRF and information disclosure
- Apache Software Foundation Apache Cocoon
- Denial of service
Not analysed yet 20 Oct 2026