All security reports
NVD security advisory

Security advisory for CVE-2026-49922

CVE-2026-49922

Full advisory details, affected packages, severity context, and original source.

Affected technology

CVE-2026-49922Java ecosystem

Advisory overview

In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account