CVE-2025-24859

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 28, 2026

Last Seen

September 28, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Apache Roller 6.1.5 Disclosed78.0

A critical vulnerability, CVE-2026-82384, was disclosed for Apache Roller 6.1.5, allowing unauthenticated remote attackers to exploit deserialization of untrusted data via the XML-RPC endpoint. The flaw arises from the server's acceptance of vendor extension types, which are deserialized before auth...