Vulnerability record/PUBLISHED/Published Nov 9, 2026 10:16:41 UTC
CVE-2026-118196
OAuth 1 rebinding vulnerability in Apache Allura. This issue affects Apache Allura: through 1.22.0. Users are recommended to upgrade to version 1.22.1, which fixes the issue.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityapache
Last updatedNov 9, 2026 11:08:12 UTC
PublishedNov 9, 2026 10:16:41 UTC
ReservedOct 27, 2026 19:00:16 UTC
Credits
- hataehoon