If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-77310 - jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

CVE ID : CVE-2026-77310 Published : Aug. 24, 2026, 8:17 p. m. • 54 minutes ago Description : jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2. 18. 9, 2. 21. 5, 2. 22. 1, 3. 1. 5, and 3. 2. 1 on their respective release lines, the java. net. InetAddress branch of FromStringDeserializer. Std. _deserialize() calls InetAddress. getByName() on attacker-controlled input, causing eager DNS resolution during deserialization and enabling DNS-based server-side request forgery and internal-host enumeration. This issue is fixed in versions 2. 18. 9, 2. 21. 5, 2. 22. 1, 3. 1. 5, and 3. 2. 1. Severity: 5.3 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.