CVE-2026-33137

CVE-2026-33137 XWiki Platform - Unauthenticated XAR Import via REST/wikis/wikiName Description The POST /wikis/wikiName REST API endpoint in XWiki Platform executes a XAR XWiki Archive import without performing any authentication or authorization checks. An unauthenticated attacker can create or...