DoS (Denial of Service) at com.mchange:mchange-commons-java Dependency in Crucible Server

🗓️ 31 Aug 2026 17:30:57Reported by security-metrics-botType

DoS via mchange-commons-java JNDI injection in Crucible Server 4.9.0, fixed in 4.9.14.

Reporter	Title	Published	Views	Family All 60
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of mchange-commons-java, IBM webMethods BPM is vulnerable to Unsafe Reflection ( CVE-2026-55153 )	3 Sep 202609:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm
ATTACKERKB	CVE-2026-55153	1 Jul 202620:02	–	attackerkb
Atlassian	DoS (Denial of Service) at com.mchange:mchange-commons-java Dependency in Bamboo Data Center	15 Aug 202617:30	–	atlassian
Chainguard	CVE-2026-55153 vulnerabilities	15 Aug 202620:23	–	cgr
Circl	CVE-2026-55153	2 Jul 202613:02	–	circl
CVE	CVE-2026-55153	1 Jul 202620:02	–	cve
Cvelist	CVE-2026-55153 mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"	1 Jul 202620:02	–	cvelist
EUVD	EUVD-2026-41135	14 Aug 202619:29	–	euvd