CVE-2026-2861: Foswiki Changes/Viewfile/Oops information disclosure

Q: What is the severity of CVE-2026-2861?

CVE-2026-2861 has been classified as a high severity vulnerability due to potential information disclosure.

Q: How do I fix CVE-2026-2861?

To fix CVE-2026-2861, update Foswiki to version 2.1.11 or later to mitigate the vulnerability.

Q: What type of vulnerability is CVE-2026-2861?

CVE-2026-2861 is an information disclosure vulnerability affecting the Changes/Viewfile/Oops component.

Q: Is CVE-2026-2861 exploitable remotely?

Yes, CVE-2026-2861 can be exploited remotely, allowing unauthorized access to sensitive information.

Q: Which versions of Foswiki are affected by CVE-2026-2861?

Foswiki versions up to 2.1.10 are affected by CVE-2026-2861.

Published Feb 21, 2026

Updated

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended.

Affected Software

2 affected components

Foswiki<=2.1.10

Foswiki Foswiki<2.1.11

Remediation

Patch Available

https://github.com/foswiki/distro/commit/31aeecb58b64

Event History

Feb 21, 2026

CVE Published

via MITRE·06:02 AM

Data Sourced

via MITRE·06:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:17 AM

RemedyDescriptionSeverityWeaknessAffected Software

Oct 18, 58128

Event

via FIRST·11:48 AM

Frequently Asked Questions

What is the severity of CVE-2026-2861?

CVE-2026-2861 has been classified as a high severity vulnerability due to potential information disclosure.

How do I fix CVE-2026-2861?