https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:18:37.492336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-92414 CVE-2026-92414 — Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens 2026-10-10T08:18:37.507159+00:00

Affected: Apache Software Foundation Apache Jackrabbit

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.

Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with

no credential check.

This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17.

Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.