CVE-2026-103864

EUVD-2026-117432
Improper output neutralization for logs in Apache Sling Engine.



This issue affects Apache Sling Engine: before 3.0.4.



Users are recommended to upgrade to version 3.0.4, which fixes the issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
UNKNOWN
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
apachesling
𝑥
< 3.0.4
CNA