CVE-2026-44179 | xwikisas xwiki-pro-macros up to 1.14.4 excerpt-include ExcerptInclude.xml code injection

October 28, 2026 Yanac

A vulnerability marked as critical has been reported in xwikisas xwiki-pro-macros up to 1.14.4. This impacts an unknown function of the file xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/ExcerptInclude.xml of the component excerpt-include. Performing a manipulation results in code injection.

This vulnerability is cataloged as CVE-2026-44179. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More