CVE-2026-94114 - Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
CVE ID :CVE-2026-94114 Published : Oct. 6, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name,...