THREATOPS
THREAT OPSThreat News › CVE-2026-61484: Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS

CVE-2026-61484: Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS

medoss_secPublished 2026-08-05

<p>Posted by Piotr Karwasz on Aug 05</p>Severity: critical <br /> <br /> Affected versions:<br /> <br /> - Apache Lucy (Lucy): all versions<br /> <br /> Description:<br /> <br /> ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.<br /> <br /> This issue affects Apache Lucy: all versions.<br /> <br /> As this project is retired, we do not plan to release

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/440

Same event, other sources