AS
Product
Apache Shiro
by Apache Software Foundation · last CVE Aug 31, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 5Low 2
Watch

Add Apache Shiro to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56091
8.2
1%
Jun 25
Apache Shiro: Authentication bypass in Guice-Web integration
Affected: through 2.99.99; 3.0.0-alpha-0 through 3.0.0-alpha-1
Showing 1