CPE

Cpe:2.3:a:apache:roller:4.0:::::::*

1 brief RSS

Apache Roller: XML External Entity injection (CVE-2026-105153)

Apache Roller 4.0 through 6.1.6 contains an XML External Entity (XXE) vulnerability in its AtomPub endpoint that permits unauthorized file reads and server-side request forgery (SSRF).

Roller xxe ssrf webserver cve-2026-105153

1t 1c 2h ago

Cpe:2.3:a:apache:roller:4.0:*:*:*:*:*:*:*

Apache Roller: XML External Entity injection (CVE-2026-105153)

Cpe:2.3:a:apache:roller:4.0:::::::*