Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-6009

Jaspersoft Library Deserialisation Vulnerability

Description

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Jaspersoft JasperReports Library Community Edition

Default version status: unaffected

  • 0 to ≤ 7.0.6affected

Jaspersoft Jaspersoft Studio Community Edition

Default version status: unaffected

  • 0 to ≤ 7.0.6affected

Jaspersoft JasperReports Server

Default version status: unaffected

  • 0 to ≤ 10.0.0affected

Jaspersoft JasperReports Library Professional

Default version status: unaffected

  • 0 to ≤ 10.0.0affected

Jaspersoft Jaspersoft Studio Professional

Default version status: unaffected

  • 0 to ≤ 10.0.0affected

Jaspersoft JasperReports IO Professional

Default version status: unaffected

  • 0 to ≤ 10.0.0affected

Jaspersoft JasperReports IO At-Scale

Default version status: unaffected

  • 0 to ≤ 10.0.0affected

Jaspersoft JasperReports Web Studio

Default version status: unaffected

  • 0 to ≤ 10.0.1affected

References