THREAT OPS › Threat News › CVE-2026-28814: Apache JSPWiki: Arbitrary Wiki Markup rendering due to lack of authentication
CVE-2026-28814: Apache JSPWiki: Arbitrary Wiki Markup rendering due to lack of authentication
<p>Posted by Juan Pablo Santos Rodríguez on Jul 30</p>Severity<br /> Critical<br /> <br /> Vendor<br /> The Apache Software Foundation<br /> <br /> Versions Affected<br /> Apache JSPWiki up to 2.12.3<br /> <br /> Description<br /> Arbitrary Wiki Markup rendering due to lack of authentication in<br /> Apache JSPWiki allows attacker to obtain sensitive data stored in<br /> JSPWiki variables.<br /> <
Indicators of compromise
- CVE-2026-28814cve
- hadrian.iodomain
Original source: https://seclists.org/oss-sec/2026/q3/342