Skip to content
Sswaldman
Exploited and recent CVEs
-
CVE-2026-55153
High 7.1
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
0.2%
-
CVE-2026-55223
Medium 6.3
c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties
0.5%
-
CVE-2026-27830
High 8.0
c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
0.6%
-
CVE-2026-27727
High 8.3
mchange-commons-java: Remote Code Execution via JNDI Reference Resolution
1.0%