CVE-2026-50076

The Apache Fory fory-core Java SDK (versions before 1.1.0 ) on Java/JVM platforms is vulnerable to a deserialization of untrusted data in the Java replace-resolve path. A remote attacker can provide crafted Fory serialized data to bypass class registration , TypeChecker , and DisallowedList check...

PT-2026-46269

Name of the Vulnerable Software and Affected Versions Apache Fory fory-core versions prior to 1.1.0 Description Deserialization of untrusted data in the Java replace-resolve path on Java/JVM platforms allows a remote attacker to bypass class registration, TypeChecker, and DisallowedList checks. B...