CVEs in the news
Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
| CVE | Vulnerability | CVSS | Exploitation | EPSS | Articles | Seen |
|---|---|---|---|---|---|---|
| CVE-2026-54512 | jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiationFasterXML jackson-databind | 8.1High | Not in KEV | EPSS 0.9% | 1 article | |
| CVE-2026-110879 | jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)FasterXML jackson-databind | 9.8Critical | Not in KEV | EPSS 1.2% | 1 article |
No CVE on this page matches. Clear the filter, or search every CVE.
All 2 CVEs in the news this week · 387 exploited CVEs in the CISA KEV catalogue.