Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Hazelcast allows arbitrary member memory access by low-privileged client

Fix availableCritical · CVSS 9.3EPSS 0.38%

Published Oct 8, 2026 · updated Oct 8, 2026

What to do

  1. Upgrade to a fixed version: com.hazelcast:hazelcast 5.7.0, com.hazelcast:hazelcast 5.7.0, com.hazelcast:hazelcast 5.7.0.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Mavencom.hazelcast:hazelcast

Vulnerable versions
= 5.6.0
Fixed in
5.7.0

Check your project: mvn dependency:tree -Dincludes=com.hazelcast:hazelcast

Mavencom.hazelcast:hazelcast

Vulnerable versions
>= 5.5.0, < 5.5.10
Fixed in
5.7.0

Check your project: mvn dependency:tree -Dincludes=com.hazelcast:hazelcast

Mavencom.hazelcast:hazelcast

Vulnerable versions
< 5.4.5
Fixed in
5.7.0

Check your project: mvn dependency:tree -Dincludes=com.hazelcast:hazelcast

Sources

CWE-20 Improper Input Validation

← All critical vulnerabilities