468 matches found
GHSA-642R-3GJ9-2PJ5 vulnerabilities
Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, apache-nifi-registry, keycloak-config-cli, druid, strimzi-kafka-operator, infinispan, scala, apache-tika, apache-nifi, akhq, sonarqube, cass-config-builder, trino, flyway, wildfly, apicurio-registry, keycloak, dependency-track,...
CVE-2026-68494 vulnerabilities
Vulnerabilities for packages: logstash, opensearch, spdx-tools-java, apache-nifi-registry, keycloak-config-cli, druid, strimzi-kafka-operator, infinispan, scala, apache-tika, apache-nifi, akhq, sonarqube, cass-config-builder, trino, flyway, wildfly, apicurio-registry, keycloak, dependency-track,...
CVE-2026-40858
Reproducción de la deserialización insegura del repositorio de agregación remota camel-infinispan CVE-2026-40858 Este proyecto demuestra una vulnerabilidad de deserialización de Java en el componente camel-infinispan de Apache Camel, registrada como CVE-2026-40858. El repositorio de agregación...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
The vulnerability of the command-line interface of data storage software Infinispan allows attackers to exploit it to disclose sensitive information.
The vulnerability of the command-line interface of data storage software called Infinispan is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-032351)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032351 advisory. A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-093035)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093035 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-093039)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093039 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: rancher-telemetry, juicefs-csi-driver, aws-node-termination-handler, op-geth, guac, jitsucom-bulker, redis-operator, etcd, infinispan-operator, amazon-cloudwatch-agent, verticadb-operator, kubernetes, cloudflared, kubevela, emissary...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: logstash, opensearch, druid, strimzi-kafka-operator, apache-activemq-artemis, infinispan, management-api-for-apache-cassandra-5.0, apache-pulsar, wavefront-proxy, zipkin, akhq, trino, flyway, wildfly, apicurio-registry, keycloak, thingsboard, celeborn,...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: logstash, opensearch, druid, strimzi-kafka-operator, apache-activemq-artemis, infinispan, management-api-for-apache-cassandra-5.0, apache-pulsar, wavefront-proxy, zipkin, akhq, trino, flyway, wildfly, apicurio-registry, keycloak, thingsboard, celeborn,...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: opensearch, spdx-tools-java, keycloak-config-cli, druid, strimzi-kafka-operator, apache-activemq-artemis, infinispan, flink, solr, apache-tika, apache-pulsar, wavefront-proxy, zipkin, akhq, sonarqube, trino, wildfly, thingsboard, kafka, celeborn, kserve-modelmesh,...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: opensearch, spdx-tools-java, keycloak-config-cli, druid, strimzi-kafka-operator, apache-activemq-artemis, infinispan, flink, solr, apache-tika, apache-pulsar, wavefront-proxy, zipkin, akhq, sonarqube, trino, wildfly, thingsboard, kafka, celeborn, kserve-modelmesh,...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
EUVD-2026-55982
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...