SUSE CVE-2026-68494

🗓️ 06 Aug 2026 01:05:40Reported by Suse CVEType

susecve🔗 www.suse.com👁 11 Views

The non-blocking parser bypasses integer-length checks for streaming input, enabling memory growth.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by jackson-core vulnerabilities that could allow attackers to trigger a denial of service via memory or CPU exhaustion by supplying arbitrarily long numbers	10 Sep 202616:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jackson-databind impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent	2 Sep 202605:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Designer is vulnerable to CVE-2026-68494	6 Sep 202600:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	14 Aug 202611:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities	13 Aug 202610:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.	22 Sep 202607:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-core jar (CVE-2026-18401, CVE-2026-68494)	12 Aug 202605:30	–	ibm
attackerkb	CVE-2026-68494	4 Aug 202614:39	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : jackson-core (ALAS2023-2026-2067)	18 Aug 202600:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate (Important) (RHSA-2026:53644)	11 Aug 202600:00	–	nessus

Source	Link
suse	www.suse.com/security/cve/CVE-2026-68494
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1273857

06 Aug 2026 01:05Current

5.6Medium risk

Vulners AI Score5.6

CVSS 48.7

EPSS0.00372

SSVC

non-blocking parser integer length streaming input memory growth reactive frameworks jackson core