Advisories · Technology

Apache Software Foundation Apache JSPWiki.

Every CVE that names Apache Software Foundation Apache JSPWiki among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-48910 CVE record

CVSS 6.5 Medium

Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing
- Apache Software Foundation Apache JSPWiki
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2026
CVE-2026-28814 CVE record

CVSS 7.5 High

Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering
- Apache Software Foundation Apache JSPWiki
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-28813 CVE record

CVSS 8.8 High

Apache JSPWiki: JSPWiki vulnerable to JSON hijacking
- Apache Software Foundation Apache JSPWiki
- Cross-site request forgery (CSRF)
Not analysed yet 30 Jul 2026
CVE-2026-28812 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Apache JSPWiki: UserManager does not sanity-check user database at startup
- Apache Software Foundation Apache JSPWiki
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-28811 CVE record

CVSS 7.5 High

Apache JSPWiki: Error Handling - Reveals Error Details
- Apache Software Foundation Apache JSPWiki
- CWE-1295
Not analysed yet 30 Jul 2026