CVE-2026-74762: Apache Shiro: Possible session fixation with RememberMe
Published Nov 14, 2026
·Updated
Affected Software
4 affected components
debian/shiro*
debian/shiro*
debian/shiro*
debian/shiro<=1.3.2-5, <=1.3.2-6
Frequently Asked Questions
1
Which deployment area should be prioritized for review?
Review Apache Shiro deployments using the RememberMe feature, including the Debian shiro package identified in the advisory data.