CVE-2026-108089: Apache Cocoon 0 through *

Affected technology

Apache Cocoon · 0 through *
Apache Software Foundation

Component: Not specified by the source

What an attacker can do

An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of (verbose) debug logging and profile information.

Published 20-Oct-2026 12:24 UTC

CWE: CWE-497
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 12:24:42.572884+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-108089.html