CVE-2026-73240 | Apache Allura up to 1.19.0 os command injection

August 12, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Apache Allura up to 1.19.0. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in os command injection.

This vulnerability was named CVE-2026-73240. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More