PT-2026-99155

CVE-2026-68495

Published

2026-09-24

Updated

2026-10-30

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FasterXML jackson-dataformats-binary (affected versions not specified) Confluence (affected versions not specified)

Description The CBOR parser in FasterXML jackson-dataformats-binary fails to invoke StreamReadConstraints, which are limits used to prevent resource exhaustion during the parsing of Concise Binary Object Representation (CBOR) data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Tinyb0Y

Vendors

Affected products

Weakness enumeration

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-400: Uncontrolled Resource Consumption

Related identifiers