Veille CVE

Semaine du 12 octobre au 18 octobre 2026

3 CVE

Critique 3 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Apache Software Foundation Apache Allura » ✕
  1. CVE-2026-92120 9.1 Critique

    Apache Software Foundation Apache Allura

    OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue.

  2. CVE-2026-92119 9.1 Critique

    Apache Software Foundation Apache Allura

    REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue.

  3. CVE-2026-92116 9.1 Critique

    Apache Software Foundation Apache Allura

    OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue.