CVE-2026-28811

HIGH

Apache JSPWiki: Error Handling - Reveals Error Details

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-28811 has a selected CVSS score of 7.5 (high).

Description

Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 31, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Apache JSPWiki

Browse Apache Software Foundation / Apache JSPWiki

Default status: unaffected

CVE ListBefore up to 3.0.0affected

References

4