CVE-2026-56091

HighCVSS 8.2/10Last modified Jun 25, 2026

Description

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://www.cve.org/CVERecord?id=CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the `shiro-guice` module instead of the `shiro-spring` module.

This issue affects all Apache Shiro versions through 2.x, and 3.0.0-alpha-1 only when using `shiro-guice` module in a web servlet context.

Upgrade to version 3.0.0 or later, which fixes the issue.

Metrics

CVSS 4.0 8.2/10

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:D/RE:L/U:Amber

Weakness enumeration

CWE-289

Affected software

No affected versions have been published.

Timeline

Published: Jun 25, 2026
Last modified: Jun 25, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-560927.6The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forge CVE-2026-560936.3The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlik CVE-2026-560946.3The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash fil CVE-2026-560957.7The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring CVE-2026-560966.3The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcard CVE-2026-560976.5A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application CVE-2026-560984.3A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execu CVE-2026-560995.3OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpl CVE-2026-56108.8A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. CVE-2026-561008.1SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attacke CVE-2026-561015.3OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80 CVE-2026-561048.2Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated