Hazelcast vulnerabilities

Products

• Hazelcast 10

Newest

• hazelcast Hazelcast: Arbitrary member memory access by low-privileged client CVE-2026-107726 Fix available 9.3 CriticalOctober 8, 2026
• hazelcast Hazelcast: Authorization bypass in IMap Predicates API CVE-2026-107725 Fix available 8.7 HighOctober 8, 2026
• hazelcast management center Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user... CVE-2024-56518 9.8 CriticalApril 17, 2025
• hazelcast Missing permission checks on Hazelcast client protocol CVE-2023-45859 Fix available 7.6 HighFebruary 27, 2024
• hazelcast Hazelcast Platform permission checking in CSV File Source connector CVE-2023-45860 Fix available 6.5 MediumFebruary 16, 2024
• hazelcast, hazelcast imdg +1 more Hazelcast Executor Services don't check client permissions properly CVE-2023-33265 Fix available 8.8 HighJuly 18, 2023
• hazelcast Hazelcast vulnerable to unmasked password exposure CVE-2023-33264 Fix available 4.3 MediumMay 22, 2023
• hazelcast, hazelcast hazelcast-jet +1 more Hazelcast connection caching CVE-2022-36437 Fix available 9.1 CriticalDecember 27, 2022
• hazelcast, hazelcast hazelcast/hazelcast +1 more Improper Restriction of XML External Entity Reference in hazelcast/hazelcast CVE-2022-0265 Public exploitFix available 7.3 HighMarch 3, 2022
• hazelcast, hazelcast jet +1 more The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3,... CVE-2020-26168 9.8 CriticalNovember 9, 2020
• hazelcast Deserialization of Untrusted Data in Hazelcast CVE-2016-10750 Fix available 8.1 HighMay 22, 2019