CVE-2026-6009

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: May 19, 2026
Source updated: May 20, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Jaspersoft Library Deserialisation Vulnerability

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

JasperReports Library Community Edition

Vendor: Jaspersoft
Product: JasperReports Library Community Edition
Platforms: Unknown
Default status: unaffected

JasperReports Library Community Edition · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Patch	Unavailable	7.0.6	None listed

Jaspersoft Studio Community Edition

Vendor: Jaspersoft
Product: Jaspersoft Studio Community Edition
Platforms: Unknown
Default status: unaffected

Jaspersoft Studio Community Edition · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Patch	Unavailable	7.0.6	None listed

JasperReports Server

Vendor: Jaspersoft
Product: JasperReports Server
Platforms: Unknown
Default status: unaffected

JasperReports Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Patch	Unavailable	10.0.0	None listed

JasperReports Library Professional

Vendor: Jaspersoft
Product: JasperReports Library Professional
Platforms: Unknown
Default status: unaffected

JasperReports Library Professional · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Patch	Unavailable	10.0.0	None listed

Jaspersoft Studio Professional

Vendor: Jaspersoft
Product: Jaspersoft Studio Professional
Platforms: Unknown
Default status: unaffected

Jaspersoft Studio Professional · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Patch	Unavailable	10.0.0	None listed

JasperReports IO Professional

Vendor: Jaspersoft
Product: JasperReports IO Professional
Platforms: Unknown
Default status: unaffected

JasperReports IO Professional · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Hotfix	Unavailable	10.0.0	None listed

JasperReports IO At-Scale

Vendor: Jaspersoft
Product: JasperReports IO At-Scale
Platforms: Unknown
Default status: unaffected

JasperReports IO At-Scale · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Hotfix	Unavailable	10.0.0	None listed

JasperReports Web Studio

Vendor: Jaspersoft
Product: JasperReports Web Studio
Platforms: Unknown
Default status: unaffected

JasperReports Web Studio · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	Hotfix	Unavailable	10.0.1	None listed