UnratedRed Hat & Ubuntu Linux

Apache Commons BeanUtils vulnerability

USN-8322-1 Published May 27, 2026

CVE-2025-48734

Affected products & platforms

Red Hat & Ubuntu LinuxUnclassified

Summary

It was discovered that Apache Commons BeanUtils incorrectly allowed access to the declaredClass property of Java enum objects when handling externally supplied property paths. An attacker could possibly use this issue to execute arbitrary code. Affected Ubuntu releases: 24.04, 22.04, 20.04, 18.04, 16.04, 14.04. CVEs: CVE-2025-48734.

Affected versions

Ubuntu 24.04
Ubuntu 22.04
Ubuntu 20.04
Ubuntu 18.04
Ubuntu 16.04
Ubuntu 14.04

Official advisory · medium-confidence parse· fetched 3 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Apply available updates: `sudo apt update && sudo apt upgrade` (a standard system update installs the fix).

Official advisory · medium-confidence parse· fetched 3 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.