CVE-2026-111241 | Apache TomEE prior 10.3.0/11.0.0-M2 Session Bean Passivation deserialization

November 10, 2026 Yanac

A vulnerability marked as problematic has been reported in Apache TomEE. Impacted is an unknown function of the component Session Bean Passivation. This manipulation causes deserialization.

This vulnerability is handled as CVE-2026-111241. It is possible to launch the attack on the local host. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More