CVE-2026-55223 c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

CVE-2026-55223

c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC spec's DataSource.getConnection and ConnectionPoolDataSource.getPooledConnection match the getXXX form, so JavaBean...

CVE-2026-55223

CVE-2026-55223 affects the c3p0 JDBC connection pooling library. Before 0.14.0, c3p0 can enable a deserialization gadget “sink” when combined with other libraries: DataSource.getConnection() and ConnectionPoolDataSource.getPooledConnection() are treated as safe JavaBean properties, but invoking p...

CVE-2026-50003

creationtimestamp| type| source ---|---|--- 2026-06-30 22:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3ooy4n423 2026-07-01 02:36:40+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01 2026-07-02 20:45:13+00:00| seen|...

CVE-2026-52868

creationtimestamp| type| source ---|---|--- 2026-06-30 22:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3fqjp4i2z 2026-07-01 02:36:51+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-44628

creationtimestamp| type| source ---|---|--- 2026-06-30 22:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2kv3ht624 2026-07-01 02:36:49+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-58449

creationtimestamp| type| source ---|---|--- 2026-06-30 22:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2bvcfe326 2026-07-02 20:45:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpovld6x432e...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxml2: libxml2-16-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-devel-2.15.3-0.1.1.hum1 aarch64, x8664 libxml2-static-2.15.3-0.1.1.hum1 aarch64, x8664...

CVE-2026-58446

creationtimestamp| type| source ---|---|--- 2026-06-30 22:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk227pixu2k...

CVE-2026-9132

creationtimestamp| type| source ---|---|--- 2026-06-30 22:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzthy3j42u...

CVE-2026-10129

creationtimestamp| type| source ---|---|--- 2026-06-30 22:16:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpjzqfenyu27 2026-07-14 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqlxjblot32f...

CVE-2026-10109

creationtimestamp| type| source ---|---|--- 2026-06-30 22:14:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpjzniyuv52w 2026-07-02 02:40:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpmyxdq5ub2v 2026-07-03 05:07:07+00:00| seen|...

CVE-2025-36319

creationtimestamp| type| source ---|---|--- 2026-06-30 22:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjznitshp23 2026-07-01 17:50:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm3dwjt4g2t...

CVE-2026-58450

creationtimestamp| type| source ---|---|--- 2026-06-30 22:11:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzi4tmcx2b 2026-07-02 01:29:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuyipomt2y...

CVE-2026-50254

creationtimestamp| type| source ---|---|--- 2026-06-30 22:09:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzdacbg42k 2026-07-01 02:36:53+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-56278

Flowise before 3.1.0 (affected: 3.0.13 and earlier) uses a weak hardcoded default session secret ('flowise') for express-session when EXPRESS_SESSION_SECRET is not set (packages/server/src/enterprise/middleware/passport/index.ts). Because the secret is publicly visible in the source, an attacker ...

CVE-2026-35505

creationtimestamp| type| source ---|---|--- 2026-06-30 22:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjz6qpaiy2z 2026-07-01 02:36:37+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01 2026-07-01 02:53:38+00:00| seen|...

CVE-2026-58447

creationtimestamp| type| source ---|---|--- 2026-06-30 22:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjz2m5zsw2s 2026-07-03 10:05:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcc3wwhe27 2026-07-19 19:53:57+00:00| seen|...

CVE-2026-11594

creationtimestamp| type| source ---|---|--- 2026-06-30 22:02:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjywr6fnl23 2026-07-02 01:37:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvgmmvyb2r 2026-07-03 10:04:47+00:00| seen|...

CVE-2025-36320

creationtimestamp| type| source ---|---|--- 2026-06-30 22:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjyt6bsws24 2026-07-01 18:12:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4kfefir2l...