CVE-2026-82115 | Apache Wicket up to 8.19.0/9.24.0/10.11.0 WebSocket WebSocketResource.onPayload improper authorization

November 2, 2026 Yanac

A vulnerability was found in Apache Wicket up to 8.19.0/9.24.0/10.11.0 and classified as critical. The impacted element is the function WebSocketResource.onPayload of the component WebSocket Handler. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-82115. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More