CVE-2026-82705 | Apache Wicket up to 8.19.0/9.24.0/10.11.0 ResourceLink isResourceAuthorized improper authorization

November 2, 2026 Yanac

A vulnerability classified as critical has been found in Apache Wicket up to 8.19.0/9.24.0/10.11.0. Impacted is the function isResourceAuthorized of the component ResourceLink. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-82705. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More