VDB

GCVE-110-NCSC-2026-448

GCVE-110-NCSC-2026-448
Advisory PublishedCVSS 3.3/10
Vulnetix · Advisory published October 22, 2026
Multiple vulnerabilities in Jackson-databind versions up to 3.1.4 allow bypass of polymorphic type validation via improper array subtype checks, enabling potential remote code execution and system compromise.

Weaknesses (CWE)

CWE-184Incomplete List of Disallowed InputsCWE-789Memory Allocation with Excessive Size ValueCWE-863Incorrect AuthorizationCWE-772Missing Release of Resource after Effective LifetimeCWE-306Missing Authentication for Critical FunctionCWE-770Allocation of Resources Without Limits or ThrottlingCWE-502Deserialization of Untrusted DataCWE-787Out-of-bounds WriteCWE-147Improper Neutralization of Input TerminatorsCWE-1104Use of Unmaintained Third Party ComponentsCWE-385Covert Timing ChannelCWE-295Improper Certificate ValidationCWE-354Improper Validation of Integrity Check ValueCWE-297Improper Validation of Certificate with Host MismatchCWE-918Server-Side Request Forgery (SSRF)CWE-116Improper Encoding or Escaping of Output

Risk Scores

CVSS 3.1
3.3/10
Low · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Products

VendorProductVersionsPlatforms
Oraclevers:unknown/*——

Aliases

CVE-2022-1471CVE-2023-43622CVE-2024-41311CVE-2025-7962CVE-2026-101497CVE-2026-101499CVE-2026-101515CVE-2026-101520CVE-2026-101568CVE-2026-101569CVE-2026-101570CVE-2026-101571CVE-2026-101572CVE-2026-101573CVE-2026-101574CVE-2026-101575CVE-2026-101576CVE-2026-101577CVE-2026-101578CVE-2026-101579CVE-2026-101580CVE-2026-101581CVE-2026-101582CVE-2026-101583CVE-2026-101584CVE-2026-101585CVE-2026-101586CVE-2026-101587CVE-2026-101588CVE-2026-101590CVE-2026-12817CVE-2026-34477CVE-2026-41635CVE-2026-4176CVE-2026-41855CVE-2026-42404CVE-2026-42779CVE-2026-47065CVE-2026-49844CVE-2026-54399CVE-2026-54428CVE-2026-54513CVE-2026-5598CVE-2026-56741CVE-2026-59649CVE-2026-59889CVE-2026-64607CVE-2026-83379CVE-2026-83396CVE-2026-83397CVE-2026-83398CVE-2026-83399CVE-2026-83401CVE-2026-83402CVE-2026-83403CVE-2026-83407CVE-2026-83409CVE-2026-83426CVE-2026-87251CVE-2026-87296CVE-2026-87298CVE-2026-87299CVE-2026-87300CVE-2026-87302CVE-2026-87304CVE-2026-87334CVE-2026-87337CVE-2026-87346CVE-2026-87347CVE-2026-87359CVE-2026-87360CVE-2026-87361CVE-2026-87364CVE-2026-87365CVE-2026-87369CVE-2026-87370CVE-2026-87371CVE-2026-87372CVE-2026-87373CVE-2026-87374CVE-2026-87375CVE-2026-87376CVE-2026-87377CVE-2026-87378CVE-2026-87379CVE-2026-87390CVE-2026-87391CVE-2026-87392CVE-2026-87393CVE-2026-87394CVE-2026-87395CVE-2026-87396CVE-2026-87397CVE-2026-87398CVE-2026-87399CVE-2026-87400CVE-2026-87419CVE-2026-87420CVE-2026-8763CVE-2026-91210CVE-2026-91211CVE-2026-91212CVE-2026-91213CVE-2026-91214CVE-2026-91215CVE-2026-91216CVE-2026-91217CVE-2026-91218CVE-2026-91219CVE-2026-91220CVE-2026-91221CVE-2026-91222CVE-2026-91223CVE-2026-91224CVE-2026-91225CVE-2026-91226CVE-2026-91227CVE-2026-91228CVE-2026-91229CVE-2026-91230CVE-2026-91231CVE-2026-91232CVE-2026-91233CVE-2026-91234CVE-2026-91235CVE-2026-91236CVE-2026-91237CVE-2026-91238CVE-2026-91239CVE-2026-91240CVE-2026-91243CVE-2026-91245CVE-2026-91246CVE-2026-91247CVE-2026-91248CVE-2026-91250CVE-2026-91251CVE-2026-91259CVE-2026-91261CVE-2026-91262CVE-2026-91317CVE-2026-91318CVE-2026-91319CVE-2026-91320CVE-2026-91322CVE-2026-91323CVE-2026-91340CVE-2026-91341CVE-2026-91342CVE-2026-91343CVE-2026-91344CVE-2026-91345CVE-2026-91346CVE-2026-91349CVE-2026-91350CVE-2026-91351CVE-2026-91352CVE-2026-91353CVE-2026-91354CVE-2026-91355CVE-2026-91358CVE-2026-91404CVE-2026-91405CVE-2026-91406CVE-2026-91407CVE-2026-91408CVE-2026-91419CVE-2026-91457CVE-2026-91458CVE-2026-91459CVE-2026-91460CVE-2026-91467CVE-2026-91473CVE-2026-91475CVE-2026-91483CVE-2026-91488CVE-2026-91489CVE-2026-91490CVE-2026-91491CVE-2026-91492CVE-2026-91493CVE-2026-91494CVE-2026-91495CVE-2026-91501CVE-2026-91502CVE-2026-91504CVE-2026-91536CVE-2026-91542CVE-2026-91552CVE-2026-91616CVE-2026-91617CVE-2026-91668CVE-2026-91776CVE-2026-9563

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

816 records in the GCVE database · Updated November 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›