https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:00:12.681014+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-120118 EUVD-2026-120118 2026-10-03T09:00:12.687701+00:00 EUVD-2026-120118 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3708 fkie_cve-2010-3708 2026-10-03T09:00:12.687735+00:00

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.

 https://cve.radiocsirt.org/vuln/ghsa-qvq6-cw53-rmwg GHSA-qvq6-cw53-rmwg — Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP 2026-10-03T09:00:12.687765+00:00

Affected: Maven: org.drools:drools-core

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.

The maintainers of JBoss EAP patched the vulnerability by applying a fix from Drools 4.0.7.

 https://cve.radiocsirt.org/vuln/gsd-2010-3708 gsd-2010-3708 2026-10-03T09:00:12.687791+00:00 gsd-2010-3708 https://cve.radiocsirt.org/vuln/rhsa-2010:0937 RHSA-2010:0937 — Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update 2026-10-03T09:00:12.687803+00:00

JBoss drools deserialization remote code execution JBoss Remoting Denial-Of-Service JBoss EAP jmx console FileDeployment CSRF