GHSA-9wxq-mwqw-8hhg

ghsaUSosv

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

view advisory published 2026-05-19Licence: CC-BY-4.0

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-6009US	—	0.66% (51st)	Exploit	2026-05-19
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

references

External citations — patches, advisories, analysis.

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11WEB
https://github.com/Jaspersoft/jasperreportsPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2026-6009ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan