Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.9%	CVE-2026-84939Apache FreeMarker · Relative Path Traversal Critical9.1EPSS 0.9%2026-09-10CVE Database V5CVE-2026-84939 CVE-2026-84939 is a critical path traversal vulnerability in Apache FreeMarker's template loading mechanism. It occurs when an attacker specifies a malformed locale identifier while localized lookup is enabled (enabled by default). This affects versions from 2.2.0 through 2.3.34. The vulnerability allows unauthorized reading of files within the constraints of the configured TemplateLoader. Users should upgrade to version 2.3.35 or disable localized lookup to mitigate the issue. EPSS 0.9%Vulnerability Apache Software Foundation CWE-23	CVE Database V5	2026-09-10

Page 1 of 1 · 1 duplicate CVE record merged