Unsafe Deserialization Vulnerability in Apache XML Graphics FOP

CVE-2026-71395

What is CVE-2026-71395?

A vulnerability has been identified within Apache XML Graphics FOP, specifically relating to unsafe deserialization during hyphenation loading. This flaw can potentially allow attackers to manipulate the deserialization process, leading to unauthorized access or other malicious outcomes. Users are strongly advised to update their installations to version 2.12 to mitigate the risk associated with this vulnerability.

References