Severity Critical Vendor The Apache Software Foundation
Versions Affected Apache JSPWiki up to 2.12.3 Description Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki allows attacker to obtain sensitive data stored in JSPWiki variables. Mitigation Apache JSPWiki users should upgrade to 2.12.4 or later. Credit The issue was discovered by Miguel Regala (Fisher) - Hadrian.io References https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2026-28814 https://www.cve.org/CVERecord?id=CVE-2026-28814
