← Back to browse · API

CVE-2026-24815

Severity
CRITICAL
CVSS
10.0
EPSS
0.00315
Risk score
40.11
CISA KEV
No
PoC
No
Published
2026-01-27
Modified
2026-01-27
First seen
2026-08-07
Aliases
EUVD-2026-4764, GHSA-MHVC-RF83-29WQ
Products
datavane:tis 0 <v4.3.0
Sources
euvd EUVD-2026-4764

Description

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules). This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0.

References