PT-2026-65064 · Apache · Apache Wicket

CVE-2026-66391 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket.

This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0.

Users are recommended to upgrade to version 10.10.0, which fixes the issue.

Correção

Use of Insufficiently Random Values

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-330

CWE-693

Identificadores relacionados

CVE-2026-66391

Produtos afetados

Apache Wicket

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-66391 · Nota de Segurança
• https://lists.apache.org/thread/hfzcgjsbmmthzchtb8b8nv47d95scmqk · Aviso do Fabricante