DEBIAN-CVE-2026-27830

🗓️ 26 Feb 2026 01:16:24Reported by GoogleType

osv🔗 osv.dev👁 11 Views

c3p0 deserialization and JNDI abuse via user overrides; fixed in 0.12.0+

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: Due to the use of c3p0, IBM webMethods BPM is vulnerable to attack via maliciously crafted Java-serialized objects (CVE-2026-27830)	26 May 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	9 Sep 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	23 Jul 202618:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses c3p0-0.11.2.jar and mchange-commons-java-0.3.2.jar which are vulnerable to CVE-2026-27830 and CVE-2026-27727.	30 Mar 202607:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	7 Apr 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in node-tar affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:11	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Control of Generation of Code ('Code Injection') (CVE-2026-27830)	16 Jun 202617:02	–	ibm
ATTACKERKB	CVE-2026-27830	26 Feb 202600:45	–	attackerkb
BDU FSTEC	The vulnerability of the userOverridesAsString method in the JDBC driver library allows a hacker to execute arbitrary code.	31 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-27830 vulnerabilities	27 Feb 202607:17	–	cgr