CVE-2026-103863 | Apache Sling Engine up to 3.0.3 setHeader cross site scripting

November 5, 2026 Yanac

A vulnerability described as problematic has been identified in Apache Sling Engine up to 3.0.3. This affects the function setHeader. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-103863. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More