CVE-2026-67615 | Apereo openEQUELLA prior 2026.1.0 HTTP invoker endpoint deserialization

September 22, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Apereo openEQUELLA. This issue affects some unknown processing of the component HTTP invoker endpoint. The manipulation leads to deserialization.

This vulnerability is documented as CVE-2026-67615. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More