CVE-2026-84170 | Apache Wicket up to 9.24.0/10.9.1 unrestricted upload

A vulnerability, which was classified as critical, has been found in Apache Wicket up to 9.24.0/10.9.1. The impacted element is an unknown function. The manipulation leads to unrestricted upload.

This vulnerability is traded as CVE-2026-84170. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More