Vendor
A critical deserialization vulnerability (CVE-2026-19826) in alldatacenter alldata versions up to 0.6.8 allows remote attackers to trigger insecure deserialization via the xxl-rpc Listener component.