Vulnerabilities of Apache Software Foundation Apache Roller
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-82384 | Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause… | 9.8 Critical | Sep 28, 2026 |
| CVE-2026-82377 | Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content… | 9.9 Critical | Sep 28, 2026 |
| CVE-2026-82378 | Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote… | 9.0 Critical | Sep 28, 2026 |