Product

Roller (4.0 Through 6.1.6)

1 brief RSS

Apache Roller: XML External Entity injection (CVE-2026-105153)

Apache Roller 4.0 through 6.1.6 contains an XML External Entity (XXE) vulnerability in its AtomPub endpoint that permits unauthorized file reads and server-side request forgery (SSRF).

Roller xxe ssrf webserver cve-2026-105153

1t 1c 2h ago