CVE-2026-3245

Publié : 3 août 2026

Modifié : 3 août 2026

Lien officiel NVD

Score CVSS

7.5

HIGH

Description détaillée

A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://cpp.canon/vulnerability-in-prismaproduction-cve-2026-3245/https://psirt.canon/advisory-information/cp2026-007/https://www.canon-europe.com/support/product-security/https://www.usa.canon.com/about-us/to-our-customers/cpa2026-007-vulnerability-in-prismaproduction

Dernières Vulnérabilités

CVE-2026-58063

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

VOIR DÉTAILS

CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

VOIR DÉTAILS

CVE-2026-58061

In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

VOIR DÉTAILS