CVE-2026-88019 | Apache Shiro Cookie authentication replay

November 14, 2026 Yanac

A vulnerability described as critical has been identified in Apache Shiro. This affects an unknown part of the component Cookie. Executing a manipulation can lead to authentication bypass by capture-replay.

This vulnerability appears as CVE-2026-88019. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More