> CVE-2026-66391

« BACK_TO_HOME
PUBLISHED
2026-07-27 17:16
MODIFIED
2026-07-27 17:16
EPSS (Prob. Exploit)
0.64%
Top 50.1%
DATA SOURCES:
NVD 🔗 2026-07-27 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-330 CWE-693

> CWE DETAILED DESCRIPTIONS

CWE-330: Use of Insufficiently Random Values - The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. | CWE-693: Protection Mechanism Failure - The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/07/2026 17:16
Source: NVD
📊 ENRICHISSEMENT 01/08/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-330: Use of Insufficiently Random Values - The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. | CWE-693: Protection Mechanism Fai...
Total des modifications: 1 Dernière mise à jour: 3 months ago

> REFERENCES

https://lists.apache.org/thread/hfzcgjsbmmthzchtb8b8nv47d95scmqk
« BACK_TO_HOME