CVE-2026-43865

camel-hazelcast Default-Instance Unsafe Deserialization Reproducer CVE-2026-43865 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-hazelcast component, tracked as CVE-2026-43865. When Camel builds the Hazelcast Config itself — i.e. when no user-supplied...

CVE-2026-107726

A flaw was found in Hazelcast. Improper validation of client-supplied data allows a connected client to corrupt memory, potentially leading to arbitrary code execution on cluster members. Additionally, an attacker can exploit this vulnerability to read sensitive memory contents from cluster nodes...

CVE-2026-107725

A flaw was found in Hazelcast. Due to missing authorization checks within the IMap Predicates application programming interface API, an authenticated client with limited privileges can bypass access controls. This vulnerability allows an attacker to achieve arbitrary code execution on a cluster...

Improper Input Validation

Hazelcast is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of data supplied by a malicious client connected to the cluster, which allows an attacker to read arbitrary memory from a cluster member, crash the member, or potentially corrupt memory and execu...

Linux Distros Unpatched Vulnerability : CVE-2026-107725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization chec...

CVE-2026-107726

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, an...

CVE-2026-107725

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

GHSA-6V25-8WQ6-XQ4J Hazelcast allows arbitrary member memory access by low-privileged client

Impact A flaw has been found in Hazelcast Enterprise Edition and Community Edition, which would allow a low-privileged malicious client to read arbitrary data in memory from any cluster member including Java heap memory, off-heap data, and JVM process address space. Additionally, such a client ma...

cn.vertxup:vertx-co (0.4.10), cn.vertxup:vertx-ifx (0.4.10) +49 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12)

com.hazelcast:hazelcast MAVEN version 3.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.vertxup:vertx-co 0.4.10 - cn.vertxup:vertx-ifx 0.4.10 - cn.vertxup:vertx-import 0.4.10 - cn.vertxup:vertx-pin...

com.hazelcast:hazelcast-client (3.4-ea), com.hazelcast:hazelcast-cloud (3.4-ea) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.4-ea)

com.hazelcast:hazelcast MAVEN version 3.4-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.4-ea - com.hazelcast:hazelcast-cloud 3.4-ea - com.hazelcast:hazelcast-hibernate...

com.hazelcast.jet:hazelcast-jet-client-protocol (0.6), com.hazelcast.jet:hazelcast-jet-core (0.6) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.10-beta-2)

com.hazelcast:hazelcast MAVEN version 3.10-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-client-protocol 0.6 - com.hazelcast.jet:hazelcast-jet-core 0.6 -...

com.hazelcast:hazelcast-build-utils (3.6-ea), com.hazelcast:hazelcast-client (3.6-ea) +11 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.6-ea)

com.hazelcast:hazelcast MAVEN version 3.6-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.6-ea - com.hazelcast:hazelcast-client 3.6-ea -...

com.hazelcast:hazelcast-build-utils (4.0.5), com.hazelcast:hazelcast-spring (4.0.5) potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.0.5)

com.hazelcast:hazelcast MAVEN version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0.5 - com.hazelcast:hazelcast-spring 4.0.5 Source cves: CVE-2026-107725...

ch.mobi.mobitor:mobitor-base (>=3.1.13, <=3.1.97), ch.mobi.mobitor:mobitor-doc (3.1.13) +39 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.11.2)

com.hazelcast:hazelcast MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.13, =2.1.6, =1.1.4, =2.1.4, =2.0.9.0, =0.1.0, =0.1.1 -...

com.hazelcast.jet:hazelcast-jet (0.3), com.hazelcast.jet:hazelcast-jet-client-protocol (0.3) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.8-rc1)

com.hazelcast:hazelcast MAVEN version 3.8-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet 0.3 - com.hazelcast.jet:hazelcast-jet-client-protocol 0.3 -...

com.hazelcast:hazelcast-all (1.9.4.4), com.hazelcast:hazelcast-client (1.9.4.4) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.4)

com.hazelcast:hazelcast MAVEN version 1.9.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.4 - com.hazelcast:hazelcast-client 1.9.4.4 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (1.9.4.6), com.hazelcast:hazelcast-client (1.9.4.6) +14 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.6)

com.hazelcast:hazelcast MAVEN version 1.9.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.6 - com.hazelcast:hazelcast-client 1.9.4.6 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (1.9.4.8), com.hazelcast:hazelcast-client (1.9.4.8) +30 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (1.9.4.8)

com.hazelcast:hazelcast MAVEN version 1.9.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.8 - com.hazelcast:hazelcast-client 1.9.4.8 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (2.0-rc1), com.hazelcast:hazelcast-client (2.0-rc1) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.0-rc1)

com.hazelcast:hazelcast MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0-rc1 - com.hazelcast:hazelcast-client 2.0-rc1 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (2.0-rc2), com.hazelcast:hazelcast-client (2.0-rc2) +5 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.0-rc2)

com.hazelcast:hazelcast MAVEN version 2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0-rc2 - com.hazelcast:hazelcast-client 2.0-rc2 - com.hazelcast:hazelcast-cloud...