CVE-2026-92120: Apache Allura: Oauth1 Replay Attack
AI summary · grok-4.7Summaries by Vani AI
Apache Allura is affected by a low-severity OAuth1 replay attack tracked as CVE-2026-92120.
Dave Brondsema disclosed CVE-2026-92120, an OAuth1 replay attack in Apache Allura, rated low severity. The oss-security note links to the Allura project site and the CVE record but gives no affected versions, patch details, or evidence of exploitation.
Key facts
- CVE-2026-92120 is an OAuth1 replay attack in Apache Allura.
- The project rates the issue low severity.
- No versions, patch, or in-the-wild exploitation are described.
- CVEs
- CVE-2026-92120
- Vendors
- Apache
- Products
- Apache Allura
- Organizations
- Apache Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92120 | OAuth1 request replay in Apache Allura | 9.1 | — |
From the original article
Posted by Dave Brondsema on Oct 12 Severity: low https://allura. apache. org/ https://www.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.