https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:08:35.554834+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06930 bdu:2026-06930 2026-10-15T07:08:35.624804+00:00 bdu:2026-06930 https://cve.radiocsirt.org/vuln/euvd-2026-308692 EUVD-2026-308692 2026-10-15T07:08:35.624839+00:00 EUVD-2026-308692 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43975 fkie_cve-2026-43975 2026-10-15T07:08:35.624854+00:00

FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an unauthenticated attacker to write arbitrary files outside the intended upload directory or read files from arbitrary locations on the server.

This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, from 10.0.0 through 10.8.0.

Users are recommended to upgrade to version 10.9.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3gmf-p6r4-q8m6 GHSA-3gmf-p6r4-q8m6 — Apache Wicket has a Path Traversal issue 2026-10-15T07:08:35.624887+00:00

Affected: Maven: org.apache.wicket:wicket-core

FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an unauthenticated attacker to write arbitrary files outside the intended upload directory or read files from arbitrary locations on the server.

This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, from 10.0.0 through 10.8.0.

Users are recommended to upgrade to version 10.9.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1380 WID-SEC-W-2026-1380 — Apache Wicket: Mehrere Schwachstellen 2026-10-15T07:08:35.624916+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Wicket ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.