CVE-2026-116486

The Objenesis library, in versions before 3.6 , is susceptible to a type confusion vulnerability. The root cause is an instantiator caching flaw where a shared ObjenesisStd instance uses clazz.getName() as a key in ObjenesisBase.getInstantiatorOf(). This allows classes with the same name but diff...