CVE-2026-107725

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

EUVD-2026-95313

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-107725

Hazelcast , a unified real-time data platform, contains a vulnerability in the IMap Predicates API due to missing authorization checks. This flaw allows a malicious client with limited privileges to achieve arbitrary code execution on a Hazelcast cluster member. The issue affects versions prior t...

CVE-2026-107725 Hazelcast: Authorization bypass in IMap Predicates API

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

PT-2026-108286

Name of the Vulnerable Software and Affected Versions Hazelcast versions prior to 5.4.5 Hazelcast versions prior to 5.5.10 Hazelcast versions prior to 5.6.1 Description Missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary co...