Threats Tagged 'cve-2026-55772'
View all threats tagged with 'cve-2026-55772'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-55772'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-55772: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') in cedar-policy cedar-javaCVE-2026-55772 0 CVE-2026-55772 is a high-severity vulnerability in cedar-java, an open source Java implementation of the Cedar policy language. It involves a type confusion issue across the Java-Rust FFI boundary where improper input handling allows an attacker controlling certain keys in a CedarMap to cause the Rust evaluator to misinterpret a record as an entity reference. This occurs because the JSON protocol reserves special keys (__entity and __extn) without validation preventing their misuse. The vulnerability affects cedar-java versions prior to 2.3.6, versions from 3.0.0 up to but not including 3.4.1, and versions from 4.0.0 up to but not including 4.9.0. The issue requires specific conditions involving the integrating service and policy references. Fixes are available in versions 2.3.6, 3.4.1, and 4.9.0. Join the discussion | CVE Database V5 | 07/13/2026, 18:44:47 UTC Added: 07/13/2026, 19:03:06 UTC |
Showing 1 to 1 of 1 result