NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cve-2026-105111

0 stories this week · 1 this month · 1 in 6 months · mostly security

Stories per day · 30 days

1 stories, newest first · one card per story

Apache Commons BCEL Class2HTML before 6.13.0 emits unescaped class strings, enabling stored XSS (CVE-2026-105111).

Stories tagged #cve-2026-105111