Apache Shiro before 3.0.2 keeps deleted users after PropertiesRealm reload
CVE-2026-129348 is rated CVSS 4.0 2.3 and applies only when PropertiesRealm loads properties from a file.
Stories per day · 30 days
1 stories, newest first · one card per story