swaldman

Products

ProductCVEsExploitedLatest
c3p02–Jun 30, 2026
mchange-commons-java2–Jul 1, 2026

Exploited and recent CVEs

  • CVE-2026-55153 High 7.1 mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets" 0.2%
  • CVE-2026-55223 Medium 6.3 c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties 0.5%
  • CVE-2026-27830 High 8.0 c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 0.6%
  • CVE-2026-27727 High 8.3 mchange-commons-java: Remote Code Execution via JNDI Reference Resolution 1.0%