New Log4j2 Deserialization Flaw Could Enable Remote Code Execution (thecybersecguru.com)

submitted 4 days ago by UnLocoPoco@lemmy.world to c/java@programming.dev

0 comments fedilink hide all child comments

cross-posted from: https://lemmy.world/post/51139325

A newly reported flaw can bypass FilteredObjectInputStream protections through java.rmi.MarshalledObject, potentially enabling RCE and DoS in vulnerable environments. Could this become another major Log4j security headache?

no comments (yet)

sorted by: hot top new old

there doesn't seem to be anything here

this post was submitted on 26 Aug 2026

4 points (100.0% liked)

Java

2038 readers

1 users here now

For discussing Java, the JVM, languages that run on the JVM, and other related technologies.

founded 3 years ago

MODERATORS

Ategon@programming.dev

JackbyDev@programming.dev

thtroyer@programming.dev