Mchange Commons Java

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-27727 CRITICAL POC PATCH Act Now

JNDI injection in mchange-commons-java library allows remote code execution through crafted JNDI lookup strings. Similar to Log4Shell attack pattern. PoC and patch available.

Java Ldap Mchange Commons Java Redhat Suse

NVD GitHub

CVSS 3.1

9.8

EPSS

0.1%

CVE-2026-27727

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

JNDI injection in mchange-commons-java library allows remote code execution through crafted JNDI lookup strings. Similar to Log4Shell attack pattern. PoC and patch available.

Java Ldap Mchange Commons Java +2

NVD GitHub