CVE-2026-110263
MEDIUM
CVSS 5.5
Published: 2026-10-14
Modified: 2026-10-14
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type arguments to trigger a StackOverflowError during class transformation, causing denial of service.
Quick Facts
| CVE ID | CVE-2026-110263 |
| CVSS Score | 5.5 |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| Published | 2026-10-14 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |