ShiroFilterFactoryBean

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenNov 14, 2026
Last mentioned12h ago

Timeline

1 articles · newest first

ShiroFilterFactoryBean default can bypass auth for static files

A prior CVE-2026-23903 fix did not cover manually created ShiroFilterFactoryBean instances.

oss-securityupdated 06:00 UTC · 7h agofirst 01:39 UTC · 12h agoVulnerability 8 sourcesCVE-2026-114737

Related CVEs

by mentions

CVE-2026-114737—
published —

Appears with

Apache Shiroproduct · 1
Apachevendor · 1

Entities are extracted by the model from each article. First seen Nov 14, 2026, last mentioned 12h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.