Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 5m ago

#java — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#java

2 stories this week · 24 this month · 25 in 6 months · mostly security

stories per day · 30 days

Related#apache 10 #denial-of-service 9 #cve 5 #ws-policy 5 #apache-neethi 4 #path-traversal 4 #rce 3 #algorithmic-complexity 2 #huntress 2 #jsf 2 #myfaces 2 #opennlp 2 #papercut 2 #payara 2 #access-control 1 #ai-assistant 1 #apache-activemq 1 #apache-ant 1

18 stories, newest first · one card per story

Help Net Security·2d ago

Azul AI Assistant helps teams find Java licensing and security risks

#azul #java #jvm

Tools

5 min

oss-security·5d ago high

CVE-2026-94301: Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232

#apache-mina #cve-2026-94301 #cve-2026-47065

CVE-2026-94301

oss-security·8d ago

CVE-2026-91867: Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely

#apache-neethi #cve #denial-of-service

CVE-2026-91867

oss-security·10d ago high

CVE-2026-76646: Apache MyFaces: Denial of Service via Unbounded Request Parsing

#apache #cve-2026-76646 #denial-of-service

CVE-2026-76646

oss-security·10d ago high

CVE-2026-87976: Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

#apache #extension-bundles #java

CVE-2026-87976

oss-security·13d ago

CVE-2026-82426: Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location

#apache #arbitrary-file-read #cve

CVE-2026-82426

2

oss-security·15d ago

CVE-2026-82617: Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns

#apache #denial-of-service #java

CVE-2026-82617

arXiv cs.CR·16d ago

IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications

#access-control #authorization #bola

Research

1

arXiv cs.AI / cs.LG / cs.CL·17d ago

Retrofitting Code Using LLMs to Support Exceptional Behavior

#code-generation #exception-handling #java

AI research

2

oss-security·18d ago

CVE-2026-74761: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId

#apache-activemq #cve-2026-74761 #java

CVE-2026-74761

1

oss-security·18d ago

CVE-2026-41869: Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

#apache #cve-2026-41869 #denial-of-service

CVE-2026-41869

oss-security·18d ago

CVE-2026-84939: Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks

#apache #cve-2026-84939 #freemarker

CVE-2026-84939

oss-security·20d ago

CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

#apache #apache-ant #build-tools

CVE-2026-78254

1

Full Disclosure·23d ago high

Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server

#command-execution #java #payara

Vulnerability

arXiv cs.CR·23d ago

An Empirical Analysis of CodeQL False Positives and Query Refinements for Java Vulnerabilities

#codeql #false-positives #java

Research

1

Horizon3.ai·25d ago critical

CVE-2026-81578 + CVE-2026-82078 | PaperCut NG/MF Authentication Bypass and Unsafe Dynamic Class Loading Vulnerabilities

#authentication-bypass #cve-2026-81578 #cve-2026-82078

in the wild 6 min2

Security Affairs·25d ago high

U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

#cisa #huntress #java

in the wild 4 min

Palo Alto Unit 42·Aug 17, 2026 critical

CVE-2022-22965: Spring Core Remote Code Execution Vulnerability Exploited In the Wild (SpringShell) (Updated)

#cve-2022-22965 #java #rce

in the wild 15 min1