CVE-2026-92415: Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
Apache Jackrabbit DavEx clients can load attacker-chosen classes from malicious WebDAV error bodies (CVE-2026-92415).
Stories per day · 30 days
1 stories, newest first · one card per story