Skip to content
VulniPulse
Sign in
Highest advisory severityHigh 1 vendor · 1 advisory

CVE-2026-68497

CVE-2026-68497: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityHigh7.5

    High [CVE-2026-68497] com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing

    CVE-2026-68497Source published Source updated

    com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-400. Red Hat lists fixing advisory RHSA-2026:73521 with package jackson-databind, rh-lightspeed-runtimes/runtimes-agent-init-rhel9:1790202798. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; OpenShift Serverless; Red Hat AI Inference Server; and 31 more.

    Related products — impact not confirmed
    • Exploit Intelligence
    • OpenShift Developer Tools and Services
    • OpenShift Serverless
    • Red Hat AI Inference Server

    31 more entries in the full advisory.

    Source-reported affected versions
    • < 2.0.0
    • < 2.18.10
    • < 2.19.0
    • < 2.21.6

    6 more entries in the full advisory.

    Source-reported fixed versions
    • jackson-databind
    • rh-lightspeed-runtimes/runtimes-agent-init-rhel9:1790202798
    • RHSA-2026:73521
    Mitigation guidance
    • Upgrade jackson-databind to 2.18.10, 2.21.6, 2.22.2, or later fixed releases as applicable. Until updated, restrict untrusted JSON input size and complexity.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features