CVE-2026-2404
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request pay…
Published: 2026-04-14 · CVSS: 6.9 · CVSS 4.0
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7