CVE-2026-82384 - apache roller
Apache Roller version 6.1.5 lets anyone send specially crafted XML-RPC messages that are processed before anyone logs in. This can let an attacker make the server…

Too many irrelevant or confusing CVEs? Use stackflag.com

#apacheroller #apachefoundation #CVE #infosec

CVE-2026-82377 - apache roller
Apache Roller version 6.1.5 lets anyone who can log in use the old XML‑RPC interface to view, change or delete posts that belong to other blogs, because it does…

Too many irrelevant or confusing CVEs? Use stackflag.com

#apacheroller #apachefoundation #CVE #infosec

CVE-2026-82378 - apache roller
If your Roller site uses a site‑wide OAuth connection, an attacker who discovers a pending request token can attach that token to any user account, even an…

Too many irrelevant or confusing CVEs? Use stackflag.com

#apacheroller #apachefoundation #CVE #infosec