CVE-2026-74281: Software Security Vulnerability Vulnerability

HIGH
Advisory Identifier: GHSA-x4hp-m4vp-wc59
Share
CVSS 7.5
Published
Advisory Summary

CVE-2026-74281 is a HIGH (CVSS 7.5) security vulnerability vulnerability (General Security Weakness) affecting Software libraries in the Maven ecosystem. Remediation is available in the latest vendor maintenance releases.

CVE-2026-74281 at a Glance

CVE Identifier CVE-2026-74281
GHSA Identifier GHSA-x4hp-m4vp-wc59
Severity HIGH
CVSS v3.1 Base Score 7.5
CWE Classification General Security Weakness
Affected Product Software
Package Ecosystem Maven
Published Date
Last Updated

Security Impact

CVSS: 7.5

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Attack Vector Network (AV:N)
Attack Complexity Low (AC:L)
Privileges Required None (PR:N)
User Interaction None (UI:N)
Scope Unchanged (S:U)
Confidentiality None (C:N)
Integrity None (I:N)
Availability High (A:H)

How to Fix CVE-2026-74281

To remediate this vulnerability, upgrade all affected Software dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

mvn dependency:tree

How to Check if You Are Affected

To determine whether your Java application is affected by CVE-2026-74281, inspect your build dependencies using the Maven Dependency Plugin:

mvn dependency:tree

Analyze the terminal output to locate any version of Software in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: The mvn dependency:tree command inspects the resolved dependency graph declared in your project's POM files; it does not perform automated security scanning or inspect runtime dynamic classpaths. Always verify runtime container classpaths and shaded JARs.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under General Security Weakness. In Software, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bindings tipc_update_nametbl() inserts a binding advertised by a peer node using the lower and upper service-range bounds taken directly from the wire, without checking that lower <= upper. The local bind path validates the ordering (tipc_uaddr_valid()), but the name-distribution path does not. A binding with lower > upper is inserted at the far end of the service-range rbtree (keyed on lower) where no lookup or withdrawal can ever match it (service_range_foreach_match() requires sr->lower <= end). The publication, its service_range node and the augmented rbtree entry are then leaked for the lifetime of the namespace, and there is no per-peer cap equivalent to TIPC_MAX_PUBL on locally created bindings. Reject inverted ranges in the network path as well. A peer node can otherwise leak unbounded binding-table memory by sending PUBLICATION items with lower > upper.

References

NVD — CVE-2026-74281 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-74281
git.kernel.org/stable/c/2afb648f7b... WEB
https://git.kernel.org/stable/c/2afb648f7b99216c687db1f89739c995e1144153
git.kernel.org/stable/c/581ef56e5c... WEB
https://git.kernel.org/stable/c/581ef56e5c34d475056ce086dc2ba0e872ba6857
git.kernel.org/stable/c/7e401233f9... WEB
https://git.kernel.org/stable/c/7e401233f9bb74a626e70698d0d62f3a94ac0676
git.kernel.org/stable/c/973bf0ed89... WEB
https://git.kernel.org/stable/c/973bf0ed896b9898668dbadb82ed849d7d573010
git.kernel.org/stable/c/cd1955f81b... WEB
https://git.kernel.org/stable/c/cd1955f81bd8ebeef51b324989ac871ad1947fb6
git.kernel.org/stable/c/f1715d92ee... WEB
https://git.kernel.org/stable/c/f1715d92ee3095d9215b493a8603a81f646fcf61
git.kernel.org/stable/c/f683200b83... WEB
https://git.kernel.org/stable/c/f683200b83a0085d4e11abea8c1fdd9fdfb95b0b

Frequently Asked Questions

What is CVE-2026-74281?
CVE-2026-74281 is a security vulnerability in Software classified as a security vulnerability vulnerability under General Security Weakness.
Which Software versions are affected?
Affected versions include releases prior to current release patches.
What version fixes CVE-2026-74281?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
What is the CVSS score of CVE-2026-74281?
CVE-2026-74281 has a CVSS v3.1 base score of 7.5 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
What CWE is associated with CVE-2026-74281?
CVE-2026-74281 is classified under General Security Weakness.
How can I check Maven dependencies for CVE-2026-74281?
Run the dependency tree command: 'mvn dependency:tree'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-x4hp-m4vp-wc59",
  "modified" : "2026-08-17T06:33:35Z",
  "published" : "2026-08-15T06:32:27Z",
  "aliases" : [ "CVE-2026-74281" ],
  "details" : "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: reject inverted service ranges from peer bindings\n\ntipc_update_nametbl() inserts a binding advertised by a peer node using\nthe lower and upper service-range bounds taken directly from the wire,\nwithout checking that lower <= upper. The local bind path validates the\nordering (tipc_uaddr_valid()), but the name-distribution path does not.\n\nA binding with lower > upper is inserted at the far end of the\nservice-range rbtree (keyed on lower) where no lookup or withdrawal can\never match it (service_range_foreach_match() requires sr->lower <= end).\nThe publication, its service_range node and the augmented rbtree entry\nare then leaked for the lifetime of the namespace, and there is no\nper-peer cap equivalent to TIPC_MAX_PUBL on locally created bindings.\n\nReject inverted ranges in the network path as well. A peer node can\notherwise leak unbounded binding-table memory by sending PUBLICATION\nitems with lower > upper.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  } ],
  "affected" : [ ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-74281"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/2afb648f7b99216c687db1f89739c995e1144153"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/581ef56e5c34d475056ce086dc2ba0e872ba6857"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/7e401233f9bb74a626e70698d0d62f3a94ac0676"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/973bf0ed896b9898668dbadb82ed849d7d573010"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/cd1955f81bd8ebeef51b324989ac871ad1947fb6"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/f1715d92ee3095d9215b493a8603a81f646fcf61"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/f683200b83a0085d4e11abea8c1fdd9fdfb95b0b"
  } ],
  "database_specific" : {
    "cwe_ids" : [ ],
    "severity" : "HIGH",
    "github_reviewed" : false,
    "github_reviewed_at" : null,
    "nvd_published_at" : "2026-08-15T06:22:27Z"
  }
}