THREATOPS
THREAT OPSThreat News › CVE-2026-70449: Apache Wicket: Path traversal in resource style/variation/locale

CVE-2026-70449: Apache Wicket: Path traversal in resource style/variation/locale

medoss_secPublished 2026-08-30

<p>Posted by Emond Papegaaij on Aug 30</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Wicket (org.apache.wicket:wicket-core) 8.0.0 through 8.18.0<br /> - Apache Wicket (org.apache.wicket:wicket-core) 9.0.0 through 9.23.0<br /> - Apache Wicket (org.apache.wicket:wicket-core) 10.0.0 through 10.10.0<br /> <br /> Description:<br /> <br /> Improper validation of resource U

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/615