CVE-2026-82557: Apache Software Foundation Apache Wicket: Missing authorization in Apache Wicket

Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a form from the request parameters in FormonRequest and passes the result directly to FormonFormSubmittedIFormSubmitter. The check that the submitting component is visible and...

PT-2026-135039

Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a form from the request parameters in FormonRequest and passes the result directly to FormonFormSubmittedIFormSubmitter. The check that the submitting component is visible and...