CVE-2026-6009

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Affected products

Jaspersoft Reports Library

CVSS 4.0

8.7 HIGH

EPSS

0.5% (39th percentile)

Weakness

CWE-502

NVD status

Awaiting Analysis

Published

2026-05-19