CVE-2026-103866

Vendor

Apache Software Foundation

Product

Apache Sling Engine

Weakness

CWE-436, CWE-444

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   CVE NVD 1h ago

   Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine.

   Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request…

   Fix available CVE-2026-103866 Apache Software Foundation