CVE-2026-82840

Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authentication base class of Wicket's role-based security module, and its signInString, String method is the entry point through which an application authenticates a session. Renewing the...