CyberRota
← Ana sayfaya dön

CVE-2026-50076

CRITICAL · CVSS 9.1 EPSS %0.52

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-04T17:16:33.390 · Çekilme zamanı: 2026-06-30T18:09:52.691195+00:00

CyberRota Yorumu

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-50076
Severity
CRITICAL
CVSS
9.1
EPSS
%0.52
Apache Java

Orijinal NVD Açıklaması

Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a remote attacker to bypass class registration, TypeChecker, and DisallowedList checks and invoke classpath-present readResolve/readExternal hooks via crafted Fory serialized data. Users are recommended to upgrade to version 1.1.0 or later, which fixes this issue.