What’s Vulnerable › Products

Apache Software Foundation Apache Commons BCEL vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Apache Software Foundation Apache Commons BCEL version is affected

Latest Apache Software Foundation Apache Commons BCEL vulnerabilities

• CVE-2026-94114 — Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning (CVSS 5.9)
• CVE-2026-105111 — Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS (CVSS 4.7)