CVE-2026-94251

MEDIO 6.5CVE-2026-94251 · Published 23/09/2026 · updated 06/10/2026

En resumen

CVE-2026-94251 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a sling security (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.64%, mayor que el 50.5% de las vulnerabilidades.
Solución: actualizar a 1.3.2 o posterior.

Package	Affected versions	Patched versions
sling security apache	`< 1.3.2`	`1.3.2`

Description

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue.

References

lists.apache.org/thread/7zo0drh75qmk1xn7940hy4pxjs6h2b10 · Vendor Advisory
openwall.com/lists/oss-security/2026/09/23/17 · Mailing List

Más vulnerabilidades de sling security

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free