5.9 Moyenne

CVE-2026-94114 Symbolic name not mapping to correct class

Description

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before 6.13.0. Users are recommended to upgrade to version 6.13.0, which fixes the issue.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Commons BCEL 6.13	premières → < 6.13.0	6.13.0

Références

github.com github.com
lists.apache.org lists.apache.org

Chronologie

Publiée 6 octobre 2026
Dernière modification 8 octobre 2026

Les 3 CVE de Apache Commons BCEL →

CVE-2026-105111 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons… 4.7 Moyenne CVE-2022-42920 Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics Non notée

Suivre cette CVE

CVE-2026-94114 Symbolic name not mapping to correct class

Description

Produits et versions touchés

Références

Chronologie

Autres CVE de Apache Commons BCEL