Skip to content

CVE record · 1 source

CVE-2026-123374

Deserialization of Untrusted Data vulnerability in Apache Roller.

Vendor: Apache Software Foundation
Product: Apache Roller
Weakness: CWE-502
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

16

CVE NVD 27h ago

Deserialization of Untrusted Data vulnerability in Apache Roller.

Deserialization of Untrusted Data vulnerability in Apache Roller. When Roller sends a weblog update ping, its XML-RPC client deserializes Java object data contained in the ping target's response, so a party that controls that…

Fix available CVE-2026-123374 Apache Software Foundation