Hazelcast: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Hazelcast ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Daten zu manipulieren.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-38462 linked CVEs
Open advisory with all CVEs
More on Hazelcast
Other advisories
- Not ratedosv:CLEANSTART-2026-VX52649Hazelcast is a unified real-time data platform combining stream processing with a fast data store
- Not ratedosv:CLEANSTART-2026-JE76711Hazelcast is a unified real-time data platform combining stream processing with a fast data store
- Not ratedosv:CVE-2026-78162Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)
- Not ratedosv:ROOT-APP-MAVEN-CVE-2026-107726CVE-2026-107726 in com.hazelcast:hazelcast - Patched by Root
- Not ratedosv:ROOT-APP-MAVEN-CVE-2026-107725CVE-2026-107725 in com.hazelcast:hazelcast - Patched by Root
- HighCVE-2026-107726Hazelcast: Mehrere Schwachstellen
- HighCVE-2026-107725maven com.hazelcast:hazelcast: fehlende Autorisierung
- CriticalCVE-2026-107726Hazelcast allows arbitrary member memory access by low-privileged client
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3846
ID