68270 matches found
Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)
Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus. A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication CVSS: 8.6 High. Th...
CVE-2026-88900 Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. JGroupsEndpoint.createExchangeMessage, which CamelJGroupsReceiver calls for every message the jgroups consumer receives...
CVE-2026-88900 Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. JGroupsEndpoint.createExchangeMessage, which CamelJGroupsReceiver calls for every message the jgroups consumer receives...
CVE-2026-88900 Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. JGroupsEndpoint.createExchangeMessage, which CamelJGroupsReceiver calls for every message the jgroups consumer receives...
CVE-2026-88900
The Apache Camel Camel-Jgroups component is vulnerable to Unsafe Java Deserialization of cluster messages in the JGroups Consumer . The flaw exists because JGroupsEndpoint.createExchange(Message) calls org.jgroups.Message.getObject() without applying a java.io.ObjectInputFilter. Consequently, an ...
CVE-2026-78165 Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads
Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...
CVE-2026-78165 Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads
Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...
CVE-2026-78165 Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads
Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...
CVE-2026-78165
The Apache Camel camel-spring-redis component (specifically camel-spring-redis-starter and camel-quarkus-spring-redis) is vulnerable to unfiltered Java deserialization (CWE-502). When no serializer option is configured, the component lazily builds a JdkSerializationRedisSerializer that lacks a ja...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch releases of NPS. Vulnerability Details CVEID:CVE-2026-47010 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ...
Multiple vulnerabilities in IBM Java SDK affect AIX
IBM SECURITY ADVISORY First Issued: Mon Oct 19 04:45:00 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javaoct2026advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...
PT-2026-117507
Name of the Vulnerable Software and Affected Versions IBM MQ Operator affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This is possible due to unrestricted Java deserialization within the MQ Classes for Java...
ROS-20261019-73-0073
The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20261019-73-0086
The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20261019-73-0077
The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20261019-73-0099
The vulnerability in Java-21-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20261019-73-0096
The vulnerability in Java 1.8.0-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-12148: Deserialization of Untrusted Data
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java...
ROS-20261019-73-0098
The vulnerability in Java-17-openJDK is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...