https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:43:39.877849+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-18268 EUVD-2026-18268 2026-10-15T22:43:39.937600+00:00 EUVD-2026-18268 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35912 fkie_cve-2022-35912 2026-10-15T22:43:39.937637+00:00

In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loader.

 https://cve.radiocsirt.org/vuln/ghsa-6rh6-x8ww-9h97 GHSA-6rh6-x8ww-9h97 — Grails framework Remote Code Execution via Data Binding 2026-10-15T22:43:39.937669+00:00

Affected: Maven: org.grails:grails-databinding

### Impact A vulnerability has been discovered in the Grails data-binding logic which allows for Remote Code Execution in a Grails application. This exploit requires the application to be running on Java 8, either deployed as a WAR to a servlet container, or an executable JAR.

### Patches Grails framework versions 5.2.1, 5.1.9, 4.1.1, and 3.3.15

### References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35912 https://grails.org/blog/2022-07-18-rce-vulnerability.html

### For more information If you have any questions or comments about this advisory: * https://grails.org/blog/2022-07-18-rce-vulnerability.html * https://github.com/grails/grails-core/issues/12626 * Email us at [info@grails.org](mailto:info@grails.org)

### Credit

This vulnerability was discovered by [meizjm3i](https://github.com/meizjm3i) and [codeplutos](https://github.com/codeplutos) of AntGroup FG Security Lab

 https://cve.radiocsirt.org/vuln/gsd-2022-35912 gsd-2022-35912 2026-10-15T22:43:39.937707+00:00 gsd-2022-35912