PT-2026-99804

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An unauthenticated remote attacker can cause the deserialization of attacker-controlled bytes via the XML-RPC endpoint. This occurs because the endpoint accepts vendor extension types that are deserializ...