Beveiligingsadvies

CVE-2026-92785

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 20:32:41

Laatst bijgewerkt 2026-09-16 20:32:41

Toegewezen door VulnCheck

CVSS-score 9.2

Status PUBLISHED

Beschrijving

Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized objects to the master RPC endpoint.

← Alle CVE's bekijken Bekijk op cve.org ↗