A vulnerability was detected in Foswiki up to 2.1.10.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Feb 21, 2026 · NIST NVD

   Detected

   A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrad

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrad

Affected

• cpe foswiki/foswikiversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-2861

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-2861

  A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. U

  nvd.nist.gov

References

• Reference · openwall.com
• Reference · openwall.com
• Permissions Required · foswiki.org
• Permissions Required · foswiki.org
• Patch · github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com