CVE-2026-2861
MEDIUM EPSS 36.2%
Published Feb 21, 20264mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 4.0
Published Feb 21, 2026 4mo ago
Last Modified Jun 17, 2026 2w ago
Description
A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
36.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 2
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure
CWE-284
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| foswiki | foswiki | * | <2.1.11 |
References 9
- openwall.com http://www.openwall.com/lists/oss-security/2026/03/15/1
- openwall.com http://www.openwall.com/lists/oss-security/2026/03/16/1
- openwall.com http://www.openwall.com/lists/oss-security/2026/03/16/3
- foswiki.org https://foswiki.org/Tasks/Item15600
- foswiki.org https://foswiki.org/Tasks/Item15601
- github.com https://github.com/foswiki/distro/commit/31aeecb58b64
- vuldb.com https://vuldb.com/?ctiid.347101
- vuldb.com https://vuldb.com/?id.347101
- vuldb.com https://vuldb.com/?submit.753966
Remediation
- github.com https://github.com/foswiki/distro/commit/31aeecb58b64