CVE-2026-28812
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/07/2026
Last modified:
30/07/2026
Description
UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges.<br />
Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.