VulnSocial

CVE-2026-66391Disclosure(apache / wicket)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue.

apache CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-330CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wicket

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
apache
Products
wicket

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-27: 2Technical Details · 2026-07-27: 207-27
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-66391 Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 1… https://www.cve.org/CVERecord?id=CVE-2026-66391 ----- Traducción: CVE-2026-66391 Uso… http://infoflow.cloud`

    Post summary

    The text announces CVE-2026-66391 for Apache Wicket, providing the vulnerability type and affected product versions, but does not mention any PoC, exploit, or mitigation.

    0000021
    95 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-66391 Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 1… https://www.cve.org/CVERecord?id=CVE-2026-66391

    Post summary

    The entry announces CVE‑2026‑66391 as a protection‐mechanism‑failure vulnerability in Apache Wicket affecting versions 9.0.0‑9.23.0, with no PoC, exploitation, or patch details provided.

    000001.1K
    57.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachewicket---

Explore more

Back to dashboardapache CVEswicket vulnerabilities