CVE-2026-40104

The XWiki Platform (versions 1.8-rc-1, 17.0.0-rc-1, 17.5.0-rc-1, and prior) is vulnerable to a resource exhaustion vulnerability in its REST API endpoints. Specifically, endpoints such as /xwiki/rest/wikis/xwiki/spaces/AnnotationCode/pages/AnnotationConfig/objects/AnnotationCode.AnnotationConfig/...