Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-66390 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 thr… https://www.cve.org/CVERecord?id=CVE-2026-66390
Post summary
The CVE has been announced for a cross‑site scripting flaw in Apache Wicket (v9.0.0+). No PoC, exploit, or patch details are provided.
🚨*CVE* CVE-2026-66390 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 thr… https://www.cve.org/CVERecord?id=CVE-2026-66390 ----- Traducción: CVE-2026-66390 Inc… http://infoflow.cloud`
Post summary
The statement announces CVE‑2026‑66390, an XSS flaw in Apache Wicket, providing a brief technical description and a link to the CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | wicket | - | - | - |