Vulnerability intelligence

CVE-2026-81270

Apache Software Foundation Apache Allura CWE-200

Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

CVSS Score

7.5

High

EPSS — Exploit Probability

0.4%

Riskier than 36% of all CVEs · checked 2026-10-20

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Sep 4, 2026 · latest Sep 4, 2026

Coverage timeline

Apache Allura Fixes Four Flaws That Could Expose Repositories
securityonline.info · Sep 4, 2026

Related CVEs — Apache Software Foundation

CVE-2026-64959 CVE-2026-94134 CVE-2026-94135 CVE-2026-96806 CVE-2026-103413 CVE-2026-103412 CVE-2026-92414 CVE-2026-92415