Skip to content

CVE record · 1 source

CVE-2026-103863

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine.

Vendor: Apache Software Foundation
Product: Apache Sling Engine
Weakness: CWE-79, CWE-693
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 1h ago

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine. Content-Type, charset, and redirect changes from an included component evade the protectheaders /…

Fix available CVE-2026-103863 Apache Software Foundation