CVE-2026-87718 | Apache Wicket up to 9.24.0/10.11.0 Request cross-domain policy

November 2, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Apache Wicket up to 9.24.0/10.11.0. This vulnerability affects unknown code of the component Request Handler. The manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is identified as CVE-2026-87718. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More