CVE-2026-28814

highCVSS 7.5covered by 1 sourcefirst seen 2026-07-30

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.

⚡ Watch CVE-2026-28814

Get an email if CVE-2026-28814 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.33% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-28814: Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 a…nvd · 2026-07-30

External references

NVD record for CVE-2026-28814

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-28814 status](https://www.csirts.com/badge/CVE-2026-28814)](https://www.csirts.com/cve/CVE-2026-28814)