THREATOPS
THREAT OPSThreat News › CVE-2026-84939: Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks

CVE-2026-84939: Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks

medoss_secPublished 2026-09-08

<p>Posted by Dániel Dékány on Sep 08</p>Affected versions:<br /> <br /> - Apache FreeMarker (org.freemarker:freemarker) 2.2.0 through 2.3.34<br /> - Apache FreeMarker (org.freemarker:freemarker) 2.3.35 unaffected<br /> - Apache FreeMarker (org.freemarker:freemarker-gae) 2.2.0 through 2.3.34<br /> - Apache FreeMarker (org.freemarker:freemarker-gae) 2.3.35 unaffected<br /> <br /> Description:<br />

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/666