Apache Roller WSSE Auth Bypass via Digest Replay

Authentication bypass by capture-replay in Apache Roller 6.1.5 WSSE digest auth lets an attacker who intercepts a valid header gain AtomPub authority. CVSS 7.7 high.

cat cve-2026-82379.json

Vendor: Apache Software Foundation
Product: Apache Roller
CVSS: 7.7
EPSS (exploit probability): 0.4%
Status: patched
Published: September 29, 2026
Source: https://nvd.nist.gov/vuln/detail/CVE-2026-82379

CVE-2026-82379 is an authentication bypass by capture-replay vulnerability in Apache Roller 6.1.5. The WSSE digest authentication mechanism used for AtomPub does not track nonces, so an attacker who captures a valid WSSE digest authentication header can replay it to gain the victim’s AtomPub publishing authority.

What to do: Upgrade Apache Roller to a patched version. See the NVD record and the Apache Roller GitHub fix.

Related coverage

~/articles/2026-09-29-apache-roller-four-cves-patched

apache

Apache Roller Patches Critical XML-RPC Deserialization Bug

Apache Roller 6.1.5 has four patched vulnerabilities, including a CVSS 9.8 deserialization flaw allowing unauthenticated RCE via the XML-RPC endpoint.

Sep 29read →