Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Roller

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-82384 Public exploit

    Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

    Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing,…

    Apache Software Foundation Apache Roller