shiro-web

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenNov 14, 2026
Last mentioned8h ago

Timeline

1 articles · newest first

Apache Shiro before 3.0.1 allows session fixation via RememberMe

shiro-core and shiro-web before 3.0.1 are affected; CVSS 4.0 is 5.9, rated medium.

oss-securityupdated 06:00 UTC · 7h agofirst 05:06 UTC · 8h agoVulnerability 8 sourcesCVE-2026-74762

Related CVEs

by mentions

CVE-2026-74762—
published —

Appears with

shiro-coreproduct · 1
Apache Shiroproduct · 1
Apachevendor · 1

Entities are extracted by the model from each article. First seen Nov 14, 2026, last mentioned 8h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.