Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2981 articles · 185100 vulns · 37/41 feeds (7d)
← Back to list
9.8
CVE-2026-61484PATCHED
apache · lucy

Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS

Description

** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected Products

VendorProductVersions
apachelucy0

References

  • https://lists.apache.org/thread/942t3pwgz2nrhnklrtyt5zr7g4wqc9cb(vendor-advisory)

Related News (2 articles)

Tier C
oss-security3d ago
CVE-2026-61484: Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS
→ No new info (linked only)
Tier C
VulDB3d ago
CVE-2026-61484 | Apache Lucy deserialization
→ No new info (linked only)
CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
*
CWECWE-502
PublishedAug 5, 2026
Trending Score37
Source articles2
Independent2
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-41293EXP
Apache Tomcat: HTTP/2 request headers not validated
Trending: 64
NONECVE-2026-43515EXP
Apache Tomcat: Security constraints not correctly applied
Trending: 56
HIGHCVE-2026-41284EXP
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Trending: 55
HIGHCVE-2026-42498EXP
Apache Tomcat: WebSocket authentication header exposure
Trending: 55
CRITICALCVE-2026-43512
Apache Tomcat: Digest authenticator will authenticate any unknown user
Trending: 53

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 5, 2026
Discovered by ZDM
Aug 5, 2026
Patch Available
Aug 5, 2026