CVE-2026-66391

The record

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue.

Affected packages

Related vulnerabilities

• CVE-2026-79981 The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured… CWE-330
• CVE-2026-106074 A flaw in Node.js `crypto` causes the internal entropy caches used by… CWE-330
• CVE-2026-46347 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-330
• CVE-2026-46346 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-330
• CVE-2026-55889 XDG Desktop Portal is a desktop integration portal. CWE-330
• CVE-2026-114576 A vulnerability has been found in Linksys RE6250 1.0.04.001. CWE-330
• CVE-2026-53939 OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption… CWE-330
• CVE-2026-79575 The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current… CWE-330