7 matches found
EUVD-2025-26436
Malicious code in bioql PyPI...
CVE-2023-26436
Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization. Access to this API endpoint is restricted to local networks by default. Arbitrary code could be injected that is being executed when processin...
CVE-2023-26436
The CVE-2023-26436 issue affects Open-Xchange AppSuite (OX App Suite) via the documentconverterws API. Attackers able to access this endpoint can inject serialized Java objects that aren’t properly validated during deserialization, potentially allowing arbitrary code execution. The root cause is ...
CVE-2022-26436
creationtimestamp| type| source ---|---|--- 2022-08-01 18:16:58+00:00| seen| https://t.me/cibsecurity/47334...
CVE-2022-26436
The vulnerability CVE-2022-26436 affects the emi mpu component and is caused by a missing bounds check, leading to an out-of-bounds read. This can lead to local information disclosure with System execution privileges required, and no user interaction is needed. A patch identified as ALPS07023666 ...
CVE-2021-26436
creationtimestamp| type| source ---|---|--- 2021-09-03 02:36:30+00:00| seen| https://t.me/cibsecurity/28252...
CVE-2021-26436
Technical details about CVE-2021-26436 (affected component, root cause, exploitability, impact, and fixed version) are not provided in the connected documents. Monitor official advisories (e.g., Microsoft/MSRC) for updates and patches.