AW
Product
Apache Wicket
by Apache Software Foundation · last CVE Aug 31, 2026
15
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 12Low 0
Watch

Add Apache Wicket to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40010
9.1
0%
May 6
Apache Wicket: possible session fixation using AuthenticatedWebSession
Affected: 10.0.0 through 10.8.0; 8.0.0 through 8.17.0; 9.0.0 through 9.22.0
Showing 1