VULNERABILITY INTELLIGENCE

CVE-2026-28812

CVSS score9.8 CRITICAL
EPSS probability0.69%
CISA KEVNot currently listed
Published2026-07-30
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-290

Primary references