CVE-2026-96677

Vendor

Apache Software Foundation

Product

Apache Juneau

CVSS v4.0

10.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-79

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 49
   CVE NVD 2h ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau.

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau. HTML document serialization does not HTML-encode variable substitutions in the page chrome (header, nav, aside…

   CVSS 10.0 Fix available CVE-2026-96677 Apache Software Foundation