Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/15 3:17 p.m.•11 views

CVE-2026-91842

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

4.3CVSS0.00383EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/15 3:00 p.m.•36 views

CVE-2026-91842 OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

4.3CVSS0.00383EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/15 3:00 p.m.•12 views

CVE-2026-91842 OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

4.3CVSS4.3AI score0.00383EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/15 3:00 p.m.•15 views

EUVD-2026-78776

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

4.3CVSS4.2AI score0.00383EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/15 3:00 p.m.•21 views

CVE-2026-91842

OpenBankProject OBP-API versions up to 1.10.1 contain a deserialization vulnerability in the Kryo Handler component, specifically in the KryoInjection.invert function within obp-api/src/main/scala/code/api/cache/Redis.scala. The flaw allows a remote attacker to trigger unsafe deserialization, tho...

4.3CVSS4.3AI score0.00383EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•1 views

CVE-2026-91842: Deserialization of Untrusted Data

A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala of the component Kryo Handler. Such manipulation leads to deserialization. The attack can be launched remotely. A hi...

4.3CVSS4.2AI score0.00383EPSS
SaveExploits0References3
Rows per page
Query Builder