CyberRota
Back to database

CVE-2026-46509

HIGH · CVSS 8.2 EPSS 0.32% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-28 · Last synced: 2026-06-27

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-46509
Severity
HIGH
CVSS
8.2
EPSS
0.32%
Java

Original NVD Description

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain __proto__/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3.