CVE-2026-71558 | Apache Fory up to 1.4.x Smart-Pointer Deserialization type confusion

August 7, 2026 Yanac

A vulnerability was found in Apache Fory up to 1.4.x. It has been declared as critical. This affects an unknown function of the component Smart-Pointer Deserialization. Such manipulation leads to type confusion.

This vulnerability is documented as CVE-2026-71558. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More