CVE-2026-2861

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-2861

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2861.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-2861

Published

2026-02-21T06:02:07.609Z

Modified

2026-07-15T01:49:09.614859244Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Foswiki Changes/Viewfile/Oops information disclosure

Details

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended.

Database specific

{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2861.json",
    "cwe_ids": [
        "CWE-200",
        "CWE-284"
    ],
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.1.0"
                },
                {
                    "last_affected": "2.1.0"
                },
                {
                    "introduced": "2.1.1"
                },
                {
                    "last_affected": "2.1.1"
                },
                {
                    "introduced": "2.1.2"
                },
                {
                    "last_affected": "2.1.2"
                },
                {
                    "introduced": "2.1.3"
                },
                {
                    "last_affected": "2.1.3"
                },
                {
                    "introduced": "2.1.4"
                },
                {
                    "last_affected": "2.1.4"
                },
                {
                    "introduced": "2.1.5"
                },
                {
                    "last_affected": "2.1.5"
                },
                {
                    "introduced": "2.1.6"
                },
                {
                    "last_affected": "2.1.6"
                },
                {
                    "introduced": "2.1.7"
                },
                {
                    "last_affected": "2.1.7"
                },
                {
                    "introduced": "2.1.8"
                },
                {
                    "last_affected": "2.1.8"
                },
                {
                    "introduced": "2.1.9"
                },
                {
                    "last_affected": "2.1.9"
                },
                {
                    "introduced": "2.1.10"
                },
                {
                    "last_affected": "2.1.10"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/foswiki/distro

Affected ranges

Type

GIT

Repo

https://github.com/foswiki/distro

Events

Introduced

Fixed

31aeecb58b64

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2861.json"