Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

CVE-2026-92116: Apache Allura: OAuth1 missing callback validation

oss-security ()4 · 1 read
Read at seclists.org
Part of a story covered by 2 sourcesThree Apache Allura flaws disclosed on oss-securityMerged summary & timeline
AI summary · grok-4.7Summaries by Vani AI

Apache Allura OAuth1 callback validation flaw CVE-2026-92116 is rated important.

Dave Brondsema reported CVE-2026-92116, missing OAuth1 callback validation in Apache Allura, with an important severity rating. The brief oss-security notice links to the Allura site and the CVE record and does not describe versions, remediation, or observed attacks.

Key facts
  • CVE-2026-92116 is missing OAuth1 callback validation in Apache Allura.
  • Apache classifies the flaw as important severity.
  • The notice gives no versions, patch, or exploitation status.
Analyze CVE-2026-92116 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-92116
Tags
apachealluraoauthcallback-validationcve-2026-92116
Vendors
Apache
Products
Apache Allura
Organizations
Apache Software Foundation

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-92116
OAuth1 callback validation flaw in Apache Allura
9.1—

From the original article

Posted by Dave Brondsema on Oct 12 Severity: important https://allura. apache. org/ https://www.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.