WID-SEC-W-2026-2350

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

FasterXML Jackson: Mehrere Schwachstellen

view advisory published 2026-07-14

Ein Angreifer kann mehrere Schwachstellen in FasterXML Jackson ausnutzen, um Daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-59889US—OT elevated—
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, Unwr…
CVE-2026-59888US——
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan