CVE-2026-6009
RCETitle: Jaspersoft Reports Library Java Deserialisation RCE
RCE
Proof Of Concept
PoC Available for CVE-2026-6009
CWE Category
CWE-502
Published Date
May 19, 2026
Modified Date
May 19, 2026
Exploit Status
Available
Score
8.7
CVSS v4.0
Exploit Probability (EPSS)
0.47%
Vulnerability Summary
CVE-2026-6009: Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
Impacted Vendors
Analysis in Progress...
Reference Links
CVSS v4.0
Source Entity
db6d2600-d19b-4111-a010-f3c4ed70cd50
Severity
HIGH
8.7
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
N/A
RAW VECTOR
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2026-6009 Exploits & PoCs (Proof Of Concept)
GitHub
https://github.com/Pumila03/CVE-2026-6009
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
Attack Vector Matrix
Access Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
CVSS Vector String
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Stack
No specific products linked.