jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

🗓️ 21 Sep 2026 14:38:54Reported by RedHatType

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to pr...

Reporter	Title	Published	Views	Family All 1
CVE	CVE-2026-54513	23 Jun 202620:53	–	cve

Vulners

Node

AND

redhat amq_clientsRange<2026.q3

redhat enterprise_linux

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-54513
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5
github	www.github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e
github	www.github.com/FasterXML/jackson-databind/issues/5981
github	www.github.com/FasterXML/jackson-databind/issues/5983
github	www.github.com/FasterXML/jackson-databind/pull/5984
github	www.github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54513
cve	www.cve.org/CVERecord

22 Sep 2026 15:46Current

CVSS 3.18.1

EPSS0.00892

SSVC

CWE-184