WID-SEC-W-2026-3846

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Hazelcast: Mehrere Schwachstellen

view advisory published 2026-10-08

Ein Angreifer kann mehrere Schwachstellen in Hazelcast ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Daten zu manipulieren.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-107726US——
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a mali…
CVE-2026-107725US—OT elevated—
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan