CVE-2026-92414: Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
CVE-2026-92414 lets unauthenticated attackers hijack cached Apache Jackrabbit WebDAV sessions and is rated CVSS 9.3.
Stories per day · 30 days
Relatedapache2webdav2class-loading1cve-2026-924141cve-2026-924151davex1java1pre-auth1session-fixation1
1 stories, newest first · one card per story