Executive brief
Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability
Affected products
- Maven org.apache.shiro:shiro-core
Junglewise Threat Intelligence
CVE-2026-23901: Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability
CVE-2026-23901 · Severity: medium · CVSS 4 · Published 2026-02-10
Technologies: org.apache.shiro:shiro-core (Maven). Vendors: Maven.