All 4 CVE vulnerabilities found in Apache Sling Engine, with AI-generated Chinese analysis, references, and POCs.
Vendor: Apache Software Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-103866 | Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling CWE-436 | - | - | 2026-11-05 |
| CVE-2026-103864 | Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization CWE-117 | - | - | 2026-11-05 |
| CVE-2026-103863 | Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths CWE-79 | - | - | 2026-11-05 |
| CVE-2022-45064 | Apache Sling Engine: Include-based XSS CWE-79 | 8.0 | High | 2023-04-13 |
All 4 known CVE vulnerabilities affecting Apache Sling Engine with full Chinese analysis, references, and POCs where available.