CVE-2026-2102 | Wren Security wrensec-commons up to 22.6.1/22.x HTTP Binding HttpUtils.prepareResponse _mimeType cross site scripting

November 2, 2026 Yanac

A vulnerability identified as problematic has been detected in Wren Security wrensec-commons up to 22.6.1/22.x. This affects the function HttpUtils.prepareResponse of the component HTTP Binding. The manipulation of the argument _mimeType leads to cross site scripting.

This vulnerability is listed as CVE-2026-2102. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More