Cve-2026-105153

Apache Roller 4.0 through 6.1.6 contains an XML External Entity (XXE) vulnerability in its AtomPub endpoint that permits unauthorized file reads and server-side request forgery (SSRF).