https://seclists.org/oss-sec/2026/q3/483: CVE-2026-66256: Apache Shindig Common, Apache Shindig Social-Api: mote Code Execution via XStam deserialization (OpenSocial ST API)

Published Aug 13, 2026

Updated

Affected Software

2 affected components

Apache Shindig Common=all versions

Apache Shindig Social-Api=all versions

CVE-2026-66256 has been classified as an important severity level.

All versions of Apache Shindig Common and Apache Shindig Social-Api are affected by CVE-2026-66256.

CVE-2026-66256 is a deserialization of untrusted data vulnerability.

To mitigate CVE-2026-66256, it is recommended to upgrade to a patched release if available, or avoid using affected components.

The impact of CVE-2026-66256 is the potential for remote code execution due to insecure deserialization.