https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:58:27.691157+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105618 EUVD-2026-105618 2026-10-07T13:58:27.756485+00:00 EUVD-2026-105618 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1777 fkie_cve-2013-1777 2026-10-07T13:58:27.756529+00:00

The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using the JMX connector to send a crafted serialized object.

 https://cve.radiocsirt.org/vuln/ghsa-v64w-96p6-fx7w GHSA-v64w-96p6-fx7w — Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1 2026-10-07T13:58:27.756576+00:00

Affected: Maven: org.apache.geronimo.framework:geronimo-jmx-remoting

The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using the JMX connector to send a crafted serialized object.

 https://cve.radiocsirt.org/vuln/gsd-2013-1777 gsd-2013-1777 2026-10-07T13:58:27.756616+00:00 gsd-2013-1777