CVE-2026-66090 | Apereo openEQUELLA up to 2026.0 XML parser /api/item server-side request forgery

October 29, 2026 Yanac

A vulnerability was found in Apereo openEQUELLA up to 2026.0. It has been rated as critical. This issue affects some unknown processing of the file /api/item of the component XML parser. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-66090. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More