UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-103866
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before 3.0.4. Users are recommended to upgrade to version 3.0.4, which fixes the issue.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-05T18:05:53.357748+00:00
- Cve id
- CVE-2026-103866
- First seen by Signal
- 2026-11-05T13:56:33+00:00
- Retrieved at
- 2026-11-05T18:06:50+00:00
- Published at
- 2026-11-05T13:17:07.143
- Last modified
- 2026-11-05T13:17:07.143
Related Entities (2)
HAS_WEAKNESS (2)
Explore deeper with Ninja Signal's threat intelligence graph