Sling Engine

Search everything

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenNov 5, 2026
Last mentioned6d ago

Timeline

3 articles · newest first

Apache Sling Engine before 3.0.4 vulnerable to HTTP request smuggling (CVE-2026-103866)

Apache Sling Engine before 3.0.4 allows HTTP request smuggling by accepting non-standard percent-escapes.

oss-securityNov 5, 19:28 UTC · 6d agoVulnerability 3 sourcesCVE-2026-103866

Apache Sling Engine logs request-derived values without CR/LF neutralization (CVE-2026-103864)

Apache Sling Engine before 3.0.4 does not neutralize CR/LF in logs for request-derived values.

oss-securityNov 5, 19:27 UTC · 6d agoVulnerability 3 sourcesCVE-2026-103864

Apache Sling Engine CVE-2026-103863 bypasses include-protection mitigations

Content-Type, charset, and redirect changes from included components evade header enforcement in Sling Engine before 3.0.4.

oss-securityNov 5, 19:25 UTC · 6d agoVulnerability 3 sourcesCVE-2026-1038631

Related CVEs

by mentions

CVE-2026-1038667.5
HTTP Request Smuggling in Apache Sling Engine before 3.0.4
published 6d agoApache Sling Engine
CVE-2026-1038647.5
Log injection in Apache Sling Engine before 3.0.4
published 6d agoApache Sling Engine
CVE-2026-1038635.4
Stored XSS in Apache Sling Engine via bypassed protections
published 6d agoApache Sling Engine

Appears with

Apachevendor · 3

Entities are extracted by the model from each article. First seen Nov 5, 2026, last mentioned 6d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.