CVE-2026-82557 | Apache Wicket up to 10.11.0 Form Submission Form.java Form.onRequest improper authorization

November 2, 2026 Yanac

A vulnerability was found in Apache Wicket. It has been classified as critical. This affects the function Form.onRequest of the file Form.java of the component Form Submission. This manipulation causes improper authorization.

The identification of this vulnerability is CVE-2026-82557. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More