CVE-2026-19826

HIGH

CVE: CVE-2026-19826 - A vulnerability was detected in alldatacenter alldata up to 0Sign in to save

CVSS

7.3

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 14, 2026

Exploitability

No EPSS data available

Description

A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack may be performed from remote. The exploit is now public and may be used. The project closed the issue report as "not planned" without any further explanation.

Weaknesses

CWE-20CWE-502

Affected Packages

No package data available.

Aliases

CVE-2026-19826

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/alldatacenter/alldata/
https://github.com/alldatacenter/alldata/issues/832
https://vuldb.com/cve/CVE-2026-19826
https://vuldb.com/submit/870236
https://vuldb.com/vuln/389959
https://vuldb.com/vuln/389959/cti