CVE-2026-103866 | Apache Sling Engine up to 3.0.3 Parser expected behavior violation

November 5, 2026 Yanac

A vulnerability marked as critical has been reported in Apache Sling Engine up to 3.0.3. Affected by this issue is some unknown functionality of the component Parser. Performing a manipulation results in expected behavior violation.

This vulnerability is identified as CVE-2026-103866. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More