Skip to content
Threat Feed
Subscribe

Vendor

OpenEQUELLA

1 brief RSS
high advisory

Authenticated RCE in openEQUELLA via Deserialization Bypass

openEQUELLA versions prior to 2026.1.0 contain a critical authenticated remote code execution vulnerability involving insecure Java deserialization via the /invoker/* endpoint.

openEQUELLA
2t 1c