Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Apache Allura OAuth1 rebinding vulnerability disclosed (CVE-2026-118196)

Original title: CVE-2026-118196: Apache Allura: OAuth1 rebinding

oss-security ()
Read at seclists.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

Apache Allura rebinding issue rated critical; details at allura.apache.org.

Apache Allura is affected by an OAuth1 rebinding vulnerability. The issue was disclosed on oss-security on November 06 with critical severity. The CVE is listed at cve.org.

Security assessment · AI, from the article

Impact: OAuth1 rebinding attack

Analyze CVE-2026-118196 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-118196
Tags
apachealluraoauth1rebinding
Vendors
Apache
Products
Allura

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-118196
OAuth 1 rebinding in Apache Allura before 1.22.1
——

From the original article

Posted by Dave Brondsema on Nov 06 Severity: critical https://allura. apache. org/ https://www.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.