CVE-2026-71378 | Apache Wicket ResourceIsolationRequestCycleListener cross-site request forgery

August 30, 2026 Yanac

A vulnerability identified as problematic has been detected in Apache Wicket. This issue affects some unknown processing of the component ResourceIsolationRequestCycleListener. Performing a manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-71378. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More