SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-9645

CRITICAL · CVSS 9.9 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-05-28 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.9. It affects Java. Exploitation may require the attacker to be authenticated.

CVE
CVE-2026-9645
Severity
CRITICAL
CVSS
9.9
EPSS
0.32%
Java

Original NVD Description

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.