CVE-2026-82115

🗓️ 01 Nov 2026 21:42:45Reported by MendType

Missing authorization in Apache Wicket WebSocketResource via WebSocketMessageBroadcastHandler.

Reporter	Title	Published	Views	Family All 11
CNNVD	Apache Wicket authorization issue vulnerability	1 Nov 202600:00	–	cnnvd
CVE	CVE-2026-82115	1 Nov 202621:42	–	cve
Cvelist	CVE-2026-82115 Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResource	1 Nov 202621:42	–	cvelist
EUVD	EUVD-2026-114886	2 Nov 202600:30	–	euvd
NVD	CVE-2026-82115	1 Nov 202622:17	–	nvd
Positive Technologies	PT-2026-135038	1 Nov 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-82115: Apache Software Foundation Apache Wicket: Missing authorization in Apache Wicket	1 Nov 202600:00	–	rapid7
vulnersOsv	com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=3.0.4, <=3.1.7), de.wicketbuch.extensions:appendablerepeater-examples (>=1.6.0.wicket9.java17, <=1.6.1.wicket9.java17) +23 more potentially affected by CVE-2026-82115 via org.apache.wicket:wicket-native-websocket-core (>=9.0.0, <=9.24.0)	1 Nov 202621:42	–	vulnersosv
vulnersOsv	com.antiliacode.widgets:ui-components (>=10.11.0-rc1, <=10.11.0-rc5), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=4.0.0-m1, <=5.0.0) +52 more potentially affected by CVE-2026-82115 via org.apache.wicket:wicket-native-websocket-core (>=10.0.0-m1, <=10.11.0)	1 Nov 202621:42	–	vulnersosv
vulnersOsv	com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=0.0.8, <=2.1.10), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (>=0.0.8, <=2.1.9) +26 more potentially affected by CVE-2026-82115 via org.apache.wicket:wicket-native-websocket-core (>=7.0.0, <=8.19.0)	1 Nov 202621:42	–	vulnersosv