Mchange Commons Java

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-27727 Maven CRITICAL POC PATCH Act Now

JNDI injection in mchange-commons-java library allows remote code execution through crafted JNDI lookup strings. Similar to Log4Shell attack pattern. PoC and patch available.

Java LDAP Red Hat Mchange Commons Java Suse

NVD GitHub

CVSS 3.1

9.8

EPSS

0.1%

CVE-2026-27727 Maven

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

JNDI injection in mchange-commons-java library allows remote code execution through crafted JNDI lookup strings. Similar to Log4Shell attack pattern. PoC and patch available.

Java LDAP Red Hat +2

NVD GitHub