CVE · coverage timeline
CVE-2026-110879jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)
1 article from 1 outlet on 29 Oct. First reported by SecurityOnline.
- Articles
- 1
- all time · from 1 outlet
- Days covered
- 1
- a single day
- Busiest day
- 1
- no day with more than one
- Last 7 days
- 0.1a day
- coverage began 2h ago
- First report
- 29 Oct
- SecurityOnline
- Exploit probability
- 1.2%
- EPSS · higher than 67% of CVEs
Coverage over time
1 article · on 29 Oct
One article so farThe timeline fills in once a second report names CVE-2026-110879. Until then: SecurityOnline, Thu 29 Oct, 02:00 UTC.
Articles
1 article1 article
- FasterXML discloses critical Jackson deserialisation flawSecurityOnline · first report
No articles in this range.