CVE-2026-19826

CVE-2026-19826 affects alldatacenter alldata up to version 0.6.8, specifically the Hessian2Input.readObject function in HessianSerializer.java within the xxl-rpc Listener. The issue is a deserialization flaw described as enabling remote exploitation, with an exploit already public. The CVE notes ...

CVE-2026-19826

A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack may be performed from remote. The...