Exposure of Sensitive Information in Apache Cocoon by The Apache Software Foundation
CVE-2026-108089
Currently unrated
What is CVE-2026-108089?
A security vulnerability has been identified in Apache Cocoon, which may expose sensitive system information to unauthorized users. This allows unauthenticated individuals to access various diagnostic interfaces, potentially triggering cache operations and exposing verbose debug logs and profile details. Given that this product is no longer maintained, users are advised to either seek alternative solutions or implement strict access controls to safeguard their instances.
Affected Version(s)
Apache Cocoon 0