CVE-2026-28812

Apache JSPWiki is affected by CVE-2026-28812 due to the UserManager not performing necessary checks at startup, enabling impersonation and potential privilege escalation up to version 2.12.3. A fix is available in JSPWiki 2.12.4 and newer. The public documents do not provide exploit code, vectors...

CVE-2026-28812 Apache JSPWiki: UserManager does not sanity-check user database at startup

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue...

Fedora 42 : coturn (2026-dfa8ea5809)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dfa8ea5809 advisory. Coturn 4.11.0 - Fix prometheus response memory leak introduced in 4.10.0 - Use constant-time compare for STUN MESSAGE-INTEGRITY HMAC - Fix format-string...