tag

Velocity

XWiki Unauthenticated XAR Import Leading to RCE — CVE-2026-33137

CVE-2026-33137· XWiki Platform patched

Apache Solr Velocity Template Injection RCE (CVE-2026-44825)

CVE-2026-44825· Apache Solr (VelocityResponseWriter / wt=velocity) patched