Vulnerability intelligence

CVE-2026-80181

Apache Software Foundation Apache Allura CWE-918

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

CVSS Score

—

Unrated

EPSS — Exploit Probability

0.5%

Riskier than 38% of all CVEs · checked 2026-10-18

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Sep 4, 2026 · latest Sep 4, 2026

Coverage timeline

Apache Allura Fixes Four Flaws That Could Expose Repositories
securityonline.info · Sep 4, 2026

Related CVEs — Apache Software Foundation

CVE-2026-101296 CVE-2026-101356 CVE-2026-103119 CVE-2026-64959 CVE-2026-94134 CVE-2026-94135 CVE-2026-96806 CVE-2026-103413