Vulnerability Bulletins |
CVE-2026-94114 |
|
| Affected software | APACHE |
|
Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons: before 6.13.0. Users are recommended to upgrade to version 6.13.0, which fixes the issue. |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-94114 | |