VulnSea

CWE-386

CVEs classified under CWE-386, newest first.

5 CVEsRSS

CVE-2026-116486Medium· 4.5
2d ago

Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache

Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches insta…

▾ Sunliteasymock · objenesisEPSS 0.14%via CVEORG
CVE-2026-94114Medium· 5.9
3w ago

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a d…

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a d…

▾ SunlitApache Software Foundation · org.apache.bcel:bcelEPSS 0.28%via NVD
CVE-2026-90279Medium· 5.5
1mo ago

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5_bitmap_sector_map() aligns the array range to full RAID5 stripe widths before converting it to component sect…

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5_bitmap_sector_map() aligns the array range to full RAID5 stripe widths before converting it to component sect…

▾ SunlitLinux · LinuxEPSS 0.20%via NVD
CVE-2026-84651Medium· 6.3
1mo ago

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the sub…

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the sub…

▾ Sunlitjenkins · jenkinsEPSS 0.31%via NVD
CVE-2026-53081High· 7.8
4mo ago

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars When regsafe() compares two scalar registers that both carry BPF_ADD_CONST, check_scalar_ids() maps …

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars When regsafe() compares two scalar registers that both carry BPF_ADD_CONST, check_scalar_ids() maps …

▾ TwilightLinux · LinuxEPSS 0.18%via NVD
CWE-386 vulnerabilities (CVEs) · VulnSea