CVE-2026-94243

The Apache Sling Security Bundle is vulnerable in versions prior to 1.3.2 due to a flaw in the ReferrerFilter , which accepts weaker-than-origin evidence. This vulnerability could allow for bypasses in security checks relying on the Referer header. Users are recommended to upgrade to version 1.3....

CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

EUVD-2026-85182

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...