Loading the current evidence view. Navigation and account controls remain available.
Indicator investigation
Loading the current evidence view. Navigation and account controls remain available.
Loading verdict, provenance, relationships and sightings.
Indicator
Type cve · source NVD CVE
Grouped attempts with latest status; expand for attempt history.
26 attempts · first 2026-08-27T16:37:01.993508Z · last 2026-09-05T20:30:39.136882Z
Not listed in CISA KEV (local)
Types: cisa_kev
26 attempts · first 2026-08-27T16:37:01.997156Z · last 2026-09-05T20:30:39.141943Z
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean. · CWEs: CWE-502 · NVD configuration lists 110 CPE criteria (see indicator relationships for product nodes
Types: nvd_local
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
Full investigation canvas with neighbor expansion.