CVE-2026-129348 in Shiro

Prediction

by VulDB Data Team • 11/14/2026

A vulnerability was identified in Apache Shiro. This vulnerability affects unknown code of the component PropertiesRealm. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Moderation: accepted
• Entry: VDB-437430
• CPE: ready
• CWE: CWE-269 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-129348
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-129348
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-129348/