CVE-2026-6857EPSS p47.0%

CVE-2026-6857CVE-2026-6857

Description

A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain full control over the affected system, impacting its confidentiality, integrity, and availability.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.67% probability of exploitation · percentile 47.0% · 2026-06-19T12:03:05Z
Last modified2026-06-02

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-40858
CVE
CVE-2026-27172
CVE
CVE-2026-40473
CVE
CVE-2026-25747
CVE
CVE-2025-27528
CVE
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.