CVE-2026-91842

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

CVE-2026-91842 OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

CVE-2026-91842 OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

EUVD-2026-78776

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

CVE-2026-91842

OpenBankProject OBP-API versions up to 1.10.1 contain a deserialization vulnerability in the Kryo Handler component, specifically in the KryoInjection.invert function within obp-api/src/main/scala/code/api/cache/Redis.scala. The flaw allows a remote attacker to trigger unsafe deserialization, tho...

CVE-2026-91842: Deserialization of Untrusted Data

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

PT-2026-92047

Name of the Vulnerable Software and Affected Versions OpenBankProject OBP-API versions prior to 1.10.2 Description A remote deserialization issue exists within the Kryo Handler component. The flaw is located in the KryoInjection.invert function within the...