CVE-2026-50076

The Apache Fory fory-core Java SDK (versions prior to 1.1.0 ) is vulnerable to a deserialization of untrusted data flaw within the Java replace-resolve path. A remote attacker can exploit this by providing crafted Fory serialized data to bypass class registration , TypeChecker , and DisallowedLis...