5 matches found
CVE-2026-33728 dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access ...
9.3CVSS0.00622EPSS
SaveExploits0References2
Malicious code in Be.Vlaanderеn.Basisregistеrs.DataDog.Tracing.Sql (NuGet)
--- -= Per source details. Do not edit below this line.=-...
7AI score
SaveExploits0
Malicious code in Be.Vlaanԁeren.Basisregisters.DаtaDog.Tracing.SqlStreamStorе.Micrоsoft (NuGet)
--- -= Per source details. Do not edit below this line.=-...
7AI score
SaveExploits0
20