· zachyceno
EPSS 0.01 (nejvyšší)
Multiple critical vulnerability in Apache Roller
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-82375, CVE-2026-82379, CVE-2026-82380, CVE-2026-82381, CVE-2026-82382, CVE-2026-82383, CVE-2026-82384, CVE-2026-82348, CVE-2026-82376, CVE-2026-82377, CVE-2026-82378, CVE-2026-82385, CVE-2026-82386, CVE-2026-82387, CVE-2026-82546, CVE-2026-91204, CVE-2026-91206, Summary: CVE-2026-82375 (CVSS: 7.4): Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user…
Apache FI
CVE v události 17
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-82348 | 7.7 3.1 · apache | – | 0.00 |
| CVE-2026-82375 | 7.4 3.1 · apache | – | 0.00 |
| CVE-2026-82376 | 7.7 3.1 · apache | – | 0.00 |
| CVE-2026-82377 | 9.9 3.1 · apache | – | 0.01 |
| CVE-2026-82378 | 9.0 3.1 · apache | – | 0.00 |
| CVE-2026-82379 | 7.7 3.1 · apache | – | 0.00 |
| CVE-2026-82380 | 8.1 3.1 · apache | – | 0.00 |
| CVE-2026-82381 | 5.4 3.1 · apache | – | 0.00 |
| CVE-2026-82382 | 6.1 3.1 · apache | – | 0.00 |
| CVE-2026-82383 | 8.2 3.1 · apache | – | 0.00 |
| CVE-2026-82384 | 9.8 3.1 · apache | – | 0.01 |
| CVE-2026-82385 | 6.5 3.1 · apache | – | 0.00 |
| CVE-2026-82386 | 7.7 3.1 · apache | – | 0.00 |
| CVE-2026-82387 | 5.4 3.1 · apache | – | 0.00 |
| CVE-2026-82546 | 6.1 3.1 · apache | – | 0.00 |
| CVE-2026-91204 | 6.1 3.1 · apache | – | 0.00 |
| CVE-2026-91206 | 6.1 3.1 · apache | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.9.