CRITICAL 9.8 NVD
CVE-2026-28812
UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrad
UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges.
Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.
References
- https://lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2p
- http://www.openwall.com/lists/oss-security/2026/07/30/15
- https://www.openwall.com/lists/oss-security/2026/07/30/15
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-07-30 via NVD.
Risk Timeline
CVE Disclosed2026-07-30 · 4 days ago
Remediation Resources
Official Advisory
lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2pOfficial Advisory
www.openwall.com/lists/oss-security/2026/07/30/15
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.