CVE-2026-82604: BareBones BBEdit Java Language recursion
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BareBones BBEdit Java Language Moduleto a version that resolves this vulnerability.Fixed in 16.0
Event History
Frequently Asked Questions
Which versions should be considered affected?
BBEdit versions up to and including 15.5.5 are identified as affected. Upgrading to version 16.0 is recommended.
What access does an attacker need to exploit this issue?
The issue is described as remotely exploitable, and the vector indicates network access with low attack complexity and no privileges required. User interaction is required.
What is the expected impact of successful exploitation?
Successful exploitation can cause uncontrolled recursion, with availability impact rated low. No confidentiality or integrity impact is identified.