Foswiki
1 CVEs
product
Monthly
Information disclosure in Foswiki versions up to 2.1.10 allows unauthenticated remote attackers to access sensitive data through the Changes/Viewfile/Oops component. Public exploit code exists for this vulnerability. Upgrading to version 2.1.11 or later resolves the issue.
Information Disclosure
Foswiki
NVD
GitHub
VulDB
CVSS 3.1
5.3
EPSS
0.1%
CVE-2026-2861
EPSS 0%
CVSS 5.3
MEDIUM
PATCH
This Month
Information disclosure in Foswiki versions up to 2.1.10 allows unauthenticated remote attackers to access sensitive data through the Changes/Viewfile/Oops component. Public exploit code exists for this vulnerability. Upgrading to version 2.1.11 or later resolves the issue.
Information Disclosure
Foswiki
NVD
GitHub
VulDB