en
Severity across 4 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, swaldman recorded 2 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, c3p0 had the most security vulnerabilities in the swaldman ecosystem, with 1 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-55153mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets" | Exploitation statusNot known exploited | FixYes | Affected productmchange-commons-java | Published07/01/2026 | SeverityHigh |
CVE-2026-55223c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties | Exploitation statusNot known exploited | FixYes | Affected productc3p0 | Published06/30/2026 | SeverityMedium |
CVE-2026-27830c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property | Exploitation statusNot known exploited | FixNot confirmed | Affected productc3p0 | Published02/26/2026 | SeverityHigh |
CVE-2026-27727mchange-commons-java: Remote Code Execution via JNDI Reference Resolution | Exploitation statusPublic exploit | FixNot confirmed | Affected productmchange-commons-java | Published02/25/2026 | SeverityHigh |
