CVE-2026-6009CWE-502

Jaspersoft Library Deserialisation Vulnerability

High · published May 19, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00664 · 51.1th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-05-19T17:23Z
EPSS history
Timeline
  • 19 MAY 17:23Z
    Jaspersoft Library Deserialisation Vulnerability
    cvelistv5