PatchTheCVEjspwiki vulnerabilities and fixes
Recent CVEs affecting jspwiki, with upgrade or downgrade steps. 5 tracked.
jspwiki has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-07-30. Highest priority: CVE-2026-28812 (score 60/100).
- CVE-2026-28812 CRITICAL 9.8 UPGRADE UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to es
- CVE-2026-28811 HIGH 7.5 UPGRADE Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgr
- CVE-2026-28814 HIGH 7.5 UPGRADE Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker t
- CVE-2026-28813 HIGH 8.8 UPGRADE Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are
- CVE-2026-48910 MEDIUM 6.5 UPGRADE A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors
FAQ
How do I fix jspwiki vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jspwiki being exploited right now?
None of the tracked jspwiki CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jspwiki CVE should I patch first?
CVE-2026-28812 currently ranks highest (60/100): UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to es.