Mchange

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mchange records in CISA KEV

No Mchange vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

C3p0 2 records MEDIUM Mchange Commons Java 1 record HIGH

Records

1 record in Mchange Commons Java · all components

TI-2026-22089 CVE-2026-27727 · GHSA-m2cm-222f-qw44

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

HIGH 74

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downl…

CVSS 4.0HIGH 8.9 Network High privileges No interaction EPSS 0.00977 Published 2026-02-25 Partial fix · 0.4.0 CWE-74

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0