Vulnerabilities CVE-2026-71559

CVE-2026-71559

None

Open

TLP:CLEAR

Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic. This issue affects Apache Fory: from 0.16.0 before 1.5.0. Users of other language implementations are not affected. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

Details

EPSS Score ⓘ: 0.59%

45.4th percentile
Confidence: 90%
Published: Aug 7, 2026
Last Modified: Aug 7, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.