Threats Tagged 'cve-2026-68494'
View all threats tagged with 'cve-2026-68494'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-68494'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-68494: CWE-770 Allocation of Resources Without Limits or Throttling in FasterXML jackson-coreCVE-2026-68494 0 CVE-2026-68494 is a high-severity vulnerability in FasterXML jackson-core affecting versions from 2.15.0 through 2.18.7, 2.19.0 through 2.21.3, 2.22.0, and certain 3.x versions. It involves incomplete validation of integer length in the non-blocking JSON parser, allowing an attacker to cause excessive memory allocation by streaming JSON numbers in many small chunks without terminators. This can lead to heap exhaustion in Java applications using asynchronous parsing, particularly reactive frameworks like Spring WebFlux and Vert.x. Exploitation requires only the ability to stream data to a parsing endpoint, with no privileges or user interaction needed. Synchronous parsers and async parsers on complete input are not affected. No official patch or remediation level is currently stated. Join the discussion | CVE Database V5 | 08/04/2026, 14:39:14 UTC Added: 08/04/2026, 14:56:55 UTC |
Showing 1 to 1 of 1 result