๐Ÿ” CVE Alert

CVE-2026-81270

HIGH 7.5

Apache Allura: Information exposure via search

CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

CWE CWE-200
Vendor apache software foundation
Product apache allura
Published Sep 4, 2026
Last Updated Sep 4, 2026
Stay Ahead of the Next One

Get instant alerts for apache software foundation apache allura

Be the first to know when new high vulnerabilities affecting apache software foundation apache allura are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Apache Software Foundation / Apache Allura
0 โ‰ค 1.20.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
lists.apache.org: https://lists.apache.org/thread/xvg5m12k3nngcomfrgvkvdy54srjmtyg openwall.com: http://www.openwall.com/lists/oss-security/2026/09/03/6

Credits

๐Ÿ” n0mi1k