THREAT OPS › Threat News › CVE-2026-28812: Apache JSPWiki: UserManager does not sanity-check user database at startup
CVE-2026-28812: Apache JSPWiki: UserManager does not sanity-check user database at startup
<p>Posted by Juan Pablo Santos Rodríguez on Jul 30</p>Severity<br /> Moderate<br /> <br /> Vendor<br /> The Apache Software Foundation<br /> <br /> Versions Affected<br /> Apache JSPWiki up to 2.12.3<br /> <br /> Description<br /> UserManager lack of checks allows impersonation in Apache JSPWiki up<br /> to 2.12.3 which may allow attackers to escalate privileges.<br /> <br /> Mitigation<br /> Apac
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2026-28812cve
Original source: https://seclists.org/oss-sec/2026/q3/340