CVE-2026-73098

Apache Juneau versions through 9.2.0 are vulnerable to an improper control of dynamically-loaded code vulnerability. When the application parses a value into a property of type java.lang.Class, the default class swap loads the named class with initialization enabled. This allows an attacker to pr...