Skip to main content

Threats Tagged 'cve-2026-66713'

View all threats tagged with 'cve-2026-66713'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-66713

Threats Tagged 'cve-2026-66713'

Click on any threat for detailed analysis and mitigation recommendations

A critical deserialization of untrusted data vulnerability (CWE-502) exists in the Tribes-based clustering component of Apache Axis2/Java through version 2.0.0. This flaw allows an unauthenticated remote attacker with network access to the clustering port to execute arbitrary code by sending a crafted serialized Java object. The vulnerability only affects systems where Tribes clustering is enabled, which is off by default. The issue is fixed in version 2.0.1 by removing the clustering feature entirely.

Join the discussion

Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component  in Apache Software Foundation Apache Axis2/Java through 2.0.0 on Apache Tomcat  (only when Tribes clustering is enabled, which is off by default) allows an  unauthenticated remote attacker with network access to the clustering port to  execute arbitrary code via a crafted serialized Java object delivered to the cluster  channel and deserialized in  org.apache.axis2.clustering.tribes.Axis2ChannelListener#messageReceived. Users are  recommended to upgrade to version 2.0.1, which fixes this issue by removing the  clustering feature entirely.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Tag: cve-2026-66713
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses