Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 14 min 169 bronnen
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-103866

NONE Gepubliceerd: CWE-436

Beschrijving

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors.

This issue affects Apache Sling Engine: before 3.0.4.

Users are recommended to upgrade to version 3.0.4, which fixes the issue.

References