CVE-2026-113730

A flaw was found in OGNL Object Graph Navigation Library. Under configurations that rely on stricter-invocation mode as a security boundary, the validation mechanism inspects the declaring class of invoked methods but fails to restrict Java reflection objects. A remote attacker capable of...