CVE-2026-14441CWE-1025

CVE-2026-14441

published September 25, 2026

CVSS
6.9
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential identity mismatch conditions.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
6.9 · CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00355 · 27.9th percentile
Weakness
CWE-1025 · Comparison Using Wrong Factors
Published
2026-09-25T01:17Z
References (1)
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39000 · [email protected]
EPSS history
Timeline
  • 26 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 24 SEP 20:58Z
    Logic flaw in SANnav Java cache key handling object comparison handling
    cvelistv5