CVE WATCH / VULNERABILITY DETAIL
CVE-2026-86507
MEDIUMCVSS 6.1NVD feed
Published 28 September 2026 · tracked since 28 September 2026
Description
Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comments o
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120151 HIGH 8.8
- CVE-2026-120150 HIGH 8.8
- CVE-2026-120149 HIGH 8.8
- CVE-2026-120147 HIGH 8.8
- CVE-2026-120145 HIGH 8.8
- CVE-2026-120144 HIGH 8.8
- CVE-2026-120143 HIGH 8.8
- CVE-2026-120142 HIGH 8.8
- CVE-2026-120141 HIGH 8.8
- CVE-2026-120139 HIGH 8.8