CVE-2026-118196 | Apache Allura OAuth1 session fixiation

A vulnerability identified as critical has been detected in Apache Allura. The affected element is an unknown function of the component OAuth1. The manipulation leads to session fixiation.

This vulnerability is traded as CVE-2026-118196. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More