Critical severity9.8NVD Advisory· Published Jul 30, 2026· Updated Aug 5, 2026

CVE-2026-28812

Description

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/JSPWikillm-fuzzy2 versions
<=2.12.3+ 1 more
- (no CPE)range: <=2.12.3
- cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*range: <2.12.4

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/07/30/15nvdMailing ListThird Party Advisory
lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2pnvdMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000