CVE-2026-82376

Apache Roller 6.1.5 is vulnerable to an XML External Entity (XXE) processing issue within the trackback response parser. An attacker with entry-editing rights on a weblog can trigger the server to parse a malicious trackback response. Because the XML parser fails to disable external entity resolu...