{"uuid": "6ba1be3c-2235-401c-a18d-2cefdfccce9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82384", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117347845822169869", "content": "Apache Roller 6.1.5 is vulnerable (CVE-2026-82384, CRITICAL, CVSS 9.8): unauthenticated remote deserialization can lead to RCE via XML-RPC \u2014 even if disabled. Upgrade to 6.1.6+ ASAP. https://radar.offseq.com/threat/cve-2026-82384-cwe-502-deserialization-of-untrusted-data-in-apache-software-foundation-apache-roller-9421d51972b16e3c #OffSeq #ApacheRoller #CVE202682384 #infosec", "creation_timestamp": "2026-09-28T09:00:27.040578Z"}