Jackrabbit WebDAV: 2,254 Body Matches vs 237 Title Matches

Apache Jackrabbit patched two flaws on 2026-10-07: a WebDAV session hijack rated 9.3 and an unsafe reflection issue in the DavEx client rated 6.9. ZoomEye queries returned 2,254 body matches against 237 title matches.

• CVE-2026-92414 is a WebDAV session hijack rated 9.3
• CVE-2026-92415 is an unsafe reflection flaw in the DavEx client rated 6.9
• Body query returned 2,254 matches, title query 237
• Fixes land in 2.23.6, 2.22.5 and 2.20.18