EUVD-2026-51181
GHSA-9c4x-gmwm-cj68
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-reachable without credentials or user interaction; only confidentiality is impacted as the flaw enables read-only variable disclosure with no write or availability effect.
Primary rating from Vendor (CNA).
CVSS VectorVendor
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
6Description PRE-NVD
Articles & Coverage 1
AnalysisAI
Unauthenticated Wiki Markup rendering in Apache JSPWiki up to 2.12.3 exposes sensitive data stored in internal JSPWiki variables to remote attackers. The flaw stems from a missing authentication check (CWE-306) on the markup rendering endpoint, allowing any network-reachable attacker to trigger rendering and extract variable contents without credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required beyond network reachability to the JSPWiki instance. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 HIGH score is driven by AV:N/AC:L/PR:N/UI:N - trivial unauthenticated remote exploitation - with C:H reflecting potentially significant disclosure of internal application data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated remote attacker sends a crafted HTTP request to the JSPWiki markup rendering endpoint containing variable-reference syntax. The engine resolves and returns the value of targeted JSPWiki variables - potentially including configuration parameters, internal paths, or user-related data - in the HTTP response, without requiring the attacker to hold any session or credentials. … |
| Remediation | Upgrade to Apache JSPWiki 2.12.4 or 3.0.0, both confirmed as fixing this issue per the vendor advisory at https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2026-28814 and the oss-security disclosure at https://seclists.org/oss-sec/2026/q3/342. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: scan your infrastructure to identify all Apache JSPWiki instances and current versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today