CVE-2026-109432

Vendor

Oracle

Product

java

CVSS

9.8

EPSS

0.006 (p46)

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 18
   CVE NVD 12d ago

   Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to…

   Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries field exposed by…

   CVSS 9.8 CVE-2026-109432 Oracle