CVE-2026-82704 | Apache Wicket up to 8.19.0/9.24.0/10.11.0 ListenerRequestHandler org.apache.wicket.Component.canCallListener improper authorization

November 2, 2026 Yanac

A vulnerability labeled as critical has been found in Apache Wicket up to 8.19.0/9.24.0/10.11.0. This affects the function org.apache.wicket.Component.canCallListener of the component ListenerRequestHandler. The manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-82704. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More