CVE-2026-6009: Jaspersoft Library Deserialisation Vulnerability
Published May 19, 2026
·Updated
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
Affected Software
1 affected component
Jaspersoft JasperReports Library
Event History
May 19, 2026
CVE Published
via MITRE·05:23 PM
Data Sourced
via MITRE·05:23 PM
DescriptionWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-6009?
CVE-2026-6009 has a high severity rating of 8.7.
2
How do I fix CVE-2026-6009?
To fix CVE-2026-6009, update to the latest version of the Jaspersoft JasperReports Library that addresses this vulnerability.
3
What could be the impact of CVE-2026-6009?
The impact of CVE-2026-6009 could lead to Remote Code Execution (RCE) on the affected system.
4
Which software is affected by CVE-2026-6009?
CVE-2026-6009 affects the Jaspersoft JasperReports Library.
5
When was CVE-2026-6009 published?
CVE-2026-6009 was published on May 19, 2026.