{"uuid": "c7e077d8-e0b8-494e-97a6-c5d48b181627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwkvhdvtdc2o", "content": "Apache Roller 6.1.5 has a critical pre-auth flaw (CVE-2026-82384, CVSS 9.8): its XML-RPC endpoint reads attacker data before any login, allowing remote code execution.\n\nDisabling XML-RPC does not help; the endpoint still answers.\n\nFix: upgrade to Roller 6.1.6.", "creation_timestamp": "2026-09-28T08:28:44.912522Z"}