SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-28813

HIGH · CVSS 8.8 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

Apache JSPWiki versions up to 2.12.3 are vulnerable to JSON Hijacking, which can lead to cross-site request forgery (CSRF) attacks. This high-severity vulnerability could allow attackers to manipulate user actions without their consent. Organizations using affected versions should prioritize upgrading to 2.12.4 to mitigate these risks.

CVE
CVE-2026-28813
Severity
HIGH
CVSS
8.8
EPSS
0.19%
Apache

Original NVD Description

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-86792 HIGH CVE-2026-86466 HIGH CVE-2026-84501 MEDIUM CVE-2026-84439 MEDIUM CVE-2026-82310 HIGH CVE-2026-79993 HIGH