严重
漏洞预警
Java 反序列化从 Redis 开始Rce
**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE
ARCHIVE
历史归档
按时间、分类、严重程度检索全部安全漏洞与安全信息。当前共收录 4 条记录。
高危
漏洞预警
CVSS 8.3
CVE-2026-84170：Allocation of resources without limits or throttling in Apache Wicket
Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.AbstractFileUploadResource is the server side of the form-less upload offered by FileUploadToResou…
高危
漏洞预警
CVSS 8.3
CVE-2026-83594：Memory allocation with an excessive size value in Apache Wicket. org.a
Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FileUploadToResourceField uploads files to a separately mounted resource rather than through a form, and…
高危
漏洞预警
CVSS 7.6
CVE-2026-111089：Apache Wicket reads texts from the application's resource bundles — a
Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes some of them into the JavaScript and the markup it generates for a component. Those texts are placed in…