CVE-2026-64606

{
  "id": "CVE-2026-64606",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-21T11:16:27.973",
  "lastModified": "2026-10-24T20:10:00.137",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected\n\n\nThis issue affects Apache Fory: from before 1.4.0.\n\nUsers are recommended to upgrade to version 1.4.0, which fixes the issue."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de deserialización de datos no confiables que puede permitir que las comprobaciones de registro de clases sean eludidas durante la deserialización de lambdas de Java. Solo la clase de captura de lambda se ve afectada.\n\nEste problema afecta a Apache Fory: desde antes de 1.4.0.\n\nSe recomienda a los usuarios actualizar a la versión 1.4.0, que corrige el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Fory",
          "defaultStatus": "unaffected",
          "collectionURL": "https://repo.maven.apache.org/maven2",
          "packageName": "org.apache.fory:fory-core",
          "versions": [
            {
              "version": "0.11.0",
              "lessThan": "1.4.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Fory",
          "defaultStatus": "unaffected",
          "collectionURL": "https://repo.maven.apache.org/maven2",
          "packageName": "org.apache.fury:fury-core",
          "versions": [
            {
              "version": "0.5.0",
              "lessThan": "0.11.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-21T13:46:59.365782Z",
          "id": "CVE-2026-64606",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:fory:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "0.5.0",
              "versionEndExcluding": "1.4.0",
              "matchCriteriaId": "7365F27C-ACED-43E0-9BCE-8EBFADEFD7DE"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread/py6fbvm9nk1gxdd85rbzbozwzfh0jrsc",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory",
        "Issue Tracking"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/07/21/4",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}