Cpe:2.3:a:jolokia:webarchive_agent:1.3.7:*:*:*:*:*:*:*

Jolokia JSR-160 proxy contains an insufficient validation flaw, identified as CVE-2026-84218, which allows attackers to bypass denylists and trigger JNDI lookups leading to SSRF or remote code execution.