CVE-2026-107726
- Source
- https://cve.org/CVERecord?id=CVE-2026-107726
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107726.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-107726
- Aliases
- Downstream
CLEANSTART (2)
ROOT (1)
- Published
- 2026-10-08T22:08:09Z
- Modified
- 2026-10-28T10:51:12Z
- Severity
-
- 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Hazelcast: Arbitrary member memory access by low-privileged client
- Details
-
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address space. The same flaw can crash cluster members and, in some Hazelcast Enterprise Edition configurations, corrupt memory with possible arbitrary code execution. Both slim and full distributions are affected. This issue is fixed in versions 5.4.5, 5.5.10, 5.6.1, and 5.7.0.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-20" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107726.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "fixed": "5.4.5" }, { "introduced": "5.5.0" }, { "fixed": "5.5.10" }, { "introduced": "5.6.0" }, { "fixed": "5.6.1" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" } ] }, { "extracted_events": [ { "range": [ { "fixed": "5.4.5" }, { "fixed": "5.4.5" } ], "source": "DESCRIPTION" } ] } ] }- References
-
- https://docs.hazelcast.com/hazelcast/5.7/release-notes/community
- https://docs.hazelcast.com/hazelcast/5.7/release-notes/enterprise
- https://github.com/hazelcast/hazelcast/releases/tag/v5.7.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107726.json
- https://github.com/hazelcast/hazelcast/security/advisories/GHSA-6v25-8wq6-xq4j
- https://nvd.nist.gov/vuln/detail/CVE-2026-107726
- https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f
Affected packages
Git / github.com/hazelcast/hazelcast
Affected ranges
- Type
- GIT
- Repo
- https://github.com/hazelcast/hazelcast
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "fixed": "361979da12f18950c24719db832ca6c5e7c0534f" } ], "source": "REFERENCES_COMMIT" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107726.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "305388621695358716747031518227583458451",
"length": 4219
},
"id": "CVE-2026-107726-010f2b75",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializer.java",
"function": "createFastReadWriteCaches"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "177289705462788173145108531212103495530",
"length": 607
},
"id": "CVE-2026-107726-01b49ec4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/config/ConfigXmlGeneratorHelper.java",
"function": "compactSerialization"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "316660090194608732916795726411014555732",
"length": 94
},
"id": "CVE-2026-107726-01eb7683",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/AbstractReflectiveSerializationRestrictionTest.java",
"function": "writeRestrictedData"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "30548038961987425318488194344713497187",
"length": 126
},
"id": "CVE-2026-107726-0362de7e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "readEmptyAllowList"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "56987152398434680689127065876627504465",
"length": 152
},
"id": "CVE-2026-107726-095f24ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializer.java",
"function": "read"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"199215887788479290433759579161539468129",
"193084200414301452805426145879968033496",
"164174812991574900710553613080957241112",
"33303107911910595252664740364631467473"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-1472298e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/config/YamlMemberDomConfigProcessor.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"193834662626487294755884857872276753754",
"48510430805503607199193359080863194643",
"221111529158411419176697400445491416872",
"257072049638921623918128028171582022119",
"247953847210889379342770233457240001809",
"103975966500256728203301809574493939496",
"104973896192951978551983424964110988500",
"64453110335730775290978029995624396451"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-18ea134b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/config/ConfigXmlGeneratorTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"323407920656760768953557834440749056847",
"273524948389434983366913630765713075150",
"154403797116902833811924801357617910553"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-1c5056f7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/config/AbstractConfigBuilderTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "152208572073529143954442902955323330531",
"length": 266
},
"id": "CVE-2026-107726-1cca82ad",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java",
"function": "getOrCreateRegistration"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"328167161091435489407672353584015469452",
"248440018570135141140547297668926072141",
"200244619527590510936221293015248580879",
"255261984265521724623276658923029921037",
"59030337235976065784419571724359801850",
"5927358225199055505973025264448274057",
"340027501922352000627728285752484627002",
"220478641094594632160464429551148580129",
"84370199871818053510245771601858474270",
"120697723311836788956543228409506446716",
"334962796849832048121589887274867114374",
"38885687141375293922621988038279960550",
"76074436723732858843714269431234255623",
"93879185124537291686778504996766113102",
"124873506435001457979738916187082835284",
"200659739855280749985863747764302979992",
"240917580884086828873942153795199211253",
"3944828408417102006481405051139346544",
"337600414756322612446646725645703782669",
"166711112125101802798575918716564841291",
"333704520921441740335616616389776409048",
"55391955871683490226167644147466985305",
"323113277121353231211698472468922419705",
"73792790405842680810503498539442936859",
"284526279869990336807845393799858535078",
"2871166970406066947019488292677034591",
"322022087890987450711869507269968360226",
"203617322132765726302661100347696660263",
"68628637709589705574309911307133448003",
"25250493921902174757527276314804157091",
"236656552180738536988493154373339257696",
"173397157208525856369752040168214829537",
"259329923201248380555974033038573611633",
"307343555813982642858039882658224328873",
"29368800012125168237855761073541522619",
"2574768983463721541906501146702423857",
"274353682502285537606004787468594839079",
"168740150815726544537269863475466108892",
"48930944614996231051251516361963267022",
"273090009005984953426050512341894183176",
"30013882802148793165738673841952772867",
"135309087623842905947935437200526166461",
"327645223449716839912038183771537133033",
"48079872504524659640866117184960140525",
"116232118207584178834398934058865777657",
"9882744802192002206166622872950986892",
"237258742621899950756166161814450322164",
"317099209848668949666215882881197373544",
"225030684586158605360086378632651926266",
"198884721433837500051049426930413423402",
"72363072800353507272721016207580669140",
"22566784254829291110588458151778470239",
"266962367480747183741876524482097082504",
"243908186399614039788352147750621218532",
"7345456346801993389705072258728672775",
"207929212081258553997165397317895229798"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-1ce03f4c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "154520742438220042578589459434184945815",
"length": 719
},
"id": "CVE-2026-107726-1f6da266",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/config/ConfigXmlGeneratorTest.java",
"function": "testCompactSerialization"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136999029827094993106735175433317464954",
"258416194798376663950737961845028779363",
"82752762146065847278150615932778161074",
"262091051529473266216321148556227270595",
"18406468170884311445762209816740250088",
"110463064166375254471886324445585093990",
"195006970213243023288114415740856240213",
"66840417225910330959322273322667153333",
"18313485400510690597600779850675312482",
"179425956251983604677000811737088944737",
"112664096573132562105257400964777231313",
"161355680841848830743926420086114902254",
"226719300284467973284485719984143057535",
"316357405882450689131029260975010861003",
"20086484654133333917949091028703422543",
"43927084767932022463113603458710176537",
"227153552864228224163361709475192579369",
"270258638975263798614340375675749935773",
"162690775263332000309962472800891425088",
"38309526101153949686729341475718746491",
"161041140016978998805500372853619123223",
"116938486051156548641613682511868459636",
"218878087723465664743866325034580891835",
"94939983505230832517928179102691046621",
"254875169698547927202324383243987811372",
"191854419614792315915639660487925236264",
"212029002357468010562423300794472496582"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-20d8cd36",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/JavaSerializationFilterConfig.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "180869490992392079149659461940819738574",
"length": 193
},
"id": "CVE-2026-107726-21175857",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveSerializationRestrictionTest.java",
"function": "parameters"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "102353816546241236012917819479702400807",
"length": 305
},
"id": "CVE-2026-107726-25969a19",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testSerializingClassReflectively_whenTheClassIsNotSupported"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "2560584091021534773085521457990485342",
"length": 304
},
"id": "CVE-2026-107726-25d2fe01",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/client/config/impl/YamlClientDomConfigProcessor.java",
"function": "handleCompactSerialization"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"54445831090456632212807376669651644571",
"30738677153395374146884872395748235975",
"9333839954890024804159174964261197058",
"208719918185603765256396087779239161287",
"134197765240385471117215146846287964762",
"188728793474212958459570972550139981041",
"58844875203694974868665539098431986545",
"184399095942767302104653220732634862968",
"4899218646522559467280123133059102491",
"162393826207626957947100455243946549282",
"124426038885870965522841722534081369240",
"224250653476396987410181894459020315479",
"303648346661169601591594958889822845309",
"109063021583318228876466637165595159374",
"13081623354159057707534136173148834296"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-2634f5b3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/zeroconfig/ValueReaderWriters.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "2560584091021534773085521457990485342",
"length": 304
},
"id": "CVE-2026-107726-2af40609",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/config/AbstractDomConfigProcessor.java",
"function": "handleCompactSerialization"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "79262900279014843230272788469407265116",
"length": 447
},
"id": "CVE-2026-107726-2cb1cd21",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast-spring-tests/src/test/java/com/hazelcast/spring/TestFullApplicationContext.java",
"function": "testCompactSerializationConfig"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "248897608569490532548299451441339527839",
"length": 1698
},
"id": "CVE-2026-107726-2e9c1006",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/AbstractSerializationService.java",
"function": "AbstractSerializationService"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"277154321137949506741978941966794106627",
"208692874061615587947855757874777694348",
"210438522797895893988002235750603546258",
"319462895898329160764557556555237601826",
"94577080116278617048246348456364312158",
"165437261532629349840747302949215983002",
"210508305531312248239534770913451292288",
"337269787124600558910952468705245736194",
"275522181845755881703840692570884648806",
"98046546804485609261909061074378850792",
"141362306326555234392429640926764589870"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-2fc7607d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/client/config/XmlClientConfigBuilderTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"275522181845755881703840692570884648806",
"160263557156698081480421637731274047967",
"142319757008980629358775797324966449176"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-301d9d78",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/config/XMLConfigBuilderTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"208106562769288715925034969781947705348",
"34219111223998951858737192070620271414",
"135574694473957232932310334527218932714",
"263973143840331013280879119086331146325",
"87234919560965822732942104374533408420",
"257687300436589594274778324911169741864",
"262635695364717186873794462048457894817",
"222789409646265441316612308869748996822",
"245351957585262890194852645248540506092",
"274517526951735551596196942377349947317",
"266586988345651406201594429055752167146",
"268103507373895132724646690171678336989",
"277483303860447240456176860793244110205",
"126477324263818151703226304037618789877",
"3705519677945166312159008396388691571",
"53360085104958362502482828622162377847",
"41327453782709640236880639874832005104",
"293740755939900998422655495701580323804",
"293875359860493468101070545428213104881",
"113303505358348048862017460738065310787",
"26471848230453452930914484501916448155",
"172819072512569439192062575266829476076",
"230976528999868584627826913304838770043"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-314ac063",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactTestUtil.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317072503972320586512156535575277275944",
"length": 210
},
"id": "CVE-2026-107726-345a8010",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java",
"function": "getOrCreateRegistration0"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "258217838488348399668147563101993153563",
"length": 251
},
"id": "CVE-2026-107726-37ae7bff",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "serialize"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "108904085540220817977735972320238952187",
"length": 290
},
"id": "CVE-2026-107726-3fcea961",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testSerializingClassReflectively_withUnsupportedFieldType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "122900191609780057869555549970276885848",
"length": 443
},
"id": "CVE-2026-107726-429e5bbe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/zeroconfig/ValueReaderWriters.java",
"function": "createReaderWriterForArray"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"326915195349708057792333401971034326592",
"136443999721571586664666266424172472077",
"128288187373433956797853941325675889329",
"105665262713932229846418095093055749939",
"337247645042259984094813122533979505882",
"154993221522666274909029867202697801240",
"21761486041844491484657712169394610673",
"91584654313970476688146505581499938522",
"44925815958038344984168596773730066810",
"192760490707692978386653926610794431609",
"27160119654246418414928696348119023627",
"91160840899013054057777706372483364252",
"53404316082864313499390486483179993579",
"15183584876686181001482816246278825183",
"148677772584258762129974636566424549859",
"308007503498390892492147304702603817240",
"88264539897640223452070006320061403838",
"56586785532150953931304893187419311125",
"302814126542556445409054069611428760898",
"3578040285049234565686486257505838142",
"96385193428230166976767860341076180579",
"46203462569577256231341889714179014970",
"75990384051543990397923366963525995743",
"49181851964942540016668221406387743301",
"135401134306656805481610085954352069938",
"58335350007579661409816714797897160666",
"31968586623768077262076290335745446754",
"306087038915063537255761191541985182395",
"338774161816982991710457324067283426946",
"195182000083874125568862703234254911930",
"55429230550565426001994468689100396534",
"281895694125369000865752795138201927287",
"76489279597940792399575523458773518293",
"106065036221649486810798680914920107896",
"214724987930989983127983891973588698463",
"218279854208813517068473460867129305260",
"229346294598651858976047909350308123700",
"96047979500585620378117486122063942807",
"266150185946537195892177949988551436463",
"312077554956624453695893334403968102327",
"273476406361765096189210322242433671412",
"175031461171894276047490017226386084627",
"280098906627706884921010982334981783250",
"313388121449545755851227149042820887785",
"301541627035457918748408276935711873932",
"158449977633043400604870342454811808200",
"242545765005321348097846597203801387215",
"296639587405647655670610839537656676151",
"176482823051601655916997476187857674374",
"165833476837624852690437711366070174592",
"45196523297688545712857522725189536175",
"159746950152007872227782681961279436727",
"141378919193852169381895018129745704445",
"261465827567158561815524513072155580445",
"121606443612388604132732337195710135878",
"264031408083973363760650008909034414493",
"74567666352799523317999214999640845924",
"31166059763995314863236715371971626737",
"79177445638336927671805842258052833376",
"146736482830934950965874846654190288099",
"126648586439954719775800300115612673126",
"229926669594139304603933527681877787808",
"241823811724760971172451533193213210995",
"111885022535098871531505197145480901276",
"45502221898696216634478465187797705455",
"90024315049861360280603221986781709613",
"139022891588823867380443347678761349972",
"231732036838077818581307547659423725391",
"8692055751925087763192222780899954766",
"87513285051911382085917586975690438996",
"102862180865926138104253726830947990566",
"191480526349060625165894464970194563135",
"298781780536314845988582523823040719679",
"290675498559978558479764911989961685030",
"327349688607837057961183603911926036736",
"329248832295234592950142359296311830004",
"178754479171497614745209380828533464566",
"41327453782709640236880639874832005104",
"293740755939900998422655495701580323804",
"279773757984817715699355867421503941212",
"6865144473247393001833302216822201177"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-438c7069",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"303592084589128527251419829544319202179",
"22429659020712325189641552468682515075",
"326010969473224537179866500411227851246",
"56620468259513975014925095631621398172",
"265105934993684987510891416643616352070",
"36180947459532065878672299032643297326",
"247850426590653095069773676934257494940",
"152644387328880478510991388887202798251",
"305843169307388919428718402974091437322",
"119326861496683559402873915250511339534",
"176417262841012913756309355230215216197",
"127330827299389386601046521379849279146"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-44cd6799",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/DefaultSerializationServiceBuilder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72855654373360549414823013498075085289",
"length": 486
},
"id": "CVE-2026-107726-488a9b63",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast-spring-tests/src/test/java/com/hazelcast/spring/TestClientApplicationContext.java",
"function": "tesCompactSerializationConfig"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317120426577760784040083747358045391235",
"length": 124
},
"id": "CVE-2026-107726-4dde6ed3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/AbstractSerializationService.java",
"function": "withReflectiveCompactSerializationBlocklist"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "266647586222346919176440740832186170326",
"length": 236
},
"id": "CVE-2026-107726-4ddeb27e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "getCompactStreamSerializer"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"323442591830622583439088543738400024403",
"67193950941522029802465029515558259326",
"75031371038343422354048330082924086862",
"153212622749102639014520262771582922540",
"44628226641494776849070534147790324767",
"192517406359595729104230216688658344887",
"240643495923681705701757062880565315400",
"132304001718918872024275447112688491116"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-4e36a62a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast-spring-tests/src/test/java/com/hazelcast/spring/TestFullApplicationContext.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "162233544988943067174532139709538838364",
"length": 124
},
"id": "CVE-2026-107726-56d00749",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/AbstractSerializationService.java",
"function": "withReflectiveCompactSerializationAllowlist"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "300778658660184105993039158007073705345",
"length": 1199
},
"id": "CVE-2026-107726-576728d6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/zeroconfig/ValueReaderWriters.java",
"function": "readerWriterFor"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "248575682298852137634244895173405689029",
"length": 630
},
"id": "CVE-2026-107726-5b46d404",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast-spring/src/main/java/com/hazelcast/spring/AbstractHazelcastBeanDefinitionParser.java",
"function": "handleCompactSerialization"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"293803609303091602974150082957185985206",
"272038362963797872891396731352975242170",
"11252863489446229809875680101646972864",
"223495791280488202441605307423183823103",
"243234034654049260168350523858484556501",
"244840737509656237787493427917385039846",
"139503755618577709889526750533120703567",
"5239275555557741262124504158317142459",
"177717318914956540166295553661522322733",
"25605467701180494198108248768963386811",
"292129971108053359534332071008724331117",
"288550795320486859223717776757883539510",
"80532343348646144152744886472540992257",
"32411379888755034067024858022005062164",
"155201044052192299941253101687936048625",
"133109527663503308902553244479826942033",
"96203106935194681071188509305335381255",
"11455354274089083834851645726820809615",
"44628226641494776849070534147790324767",
"192517406359595729104230216688658344887",
"240643495923681705701757062880565315400",
"219218310902969028105339329402139454278"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-5c7370f4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast-spring-tests/src/test/java/com/hazelcast/spring/TestClientApplicationContext.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"161881675732958843478164539425554648111",
"240451163762418077305550359292779560758",
"293901148957397778965911442058830781780",
"1397997498456461804278982031205936077",
"334804134882124115208277675377812555462",
"153904004798894003398007986560688536915",
"66307379387139037970224649501782412221",
"310932690637675349234360357644244157880",
"268580743752450175131972005079591299624",
"130663960683866648968733602130225922282",
"13815303157865756881682635049861696392",
"185546409857073188263678333086384047921"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-5cd91c55",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/record/JavaRecordSerializer.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "142889531326234614333369086953865175671",
"length": 431
},
"id": "CVE-2026-107726-5ce78769",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java",
"function": "verifyFieldClassIsCompactSerializable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "286066794348676662117394670825185123386",
"length": 169
},
"id": "CVE-2026-107726-62d6beed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/JavaSerializationFilterConfig.java",
"function": "JavaSerializationFilterConfig"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "175049805618485010386991685521410319150",
"length": 110
},
"id": "CVE-2026-107726-62e8ce2d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java",
"function": "canBeSerializedAsCompact"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "335832195812922861693144765723554616316",
"length": 275
},
"id": "CVE-2026-107726-642e624b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/record/RecordSerializationTest.java",
"function": "testSerializingRecordReflectively_withUnsupportedArrayItemType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "108904085540220817977735972320238952187",
"length": 290
},
"id": "CVE-2026-107726-652aefc0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testSerializingClassReflectively_withVoidField"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"87234919560965822732942104374533408420",
"218388557638273412455035590044863077629",
"184314177261075847827191303675702019719",
"112291378671982686527309784448112908611",
"201277382301680700163809153818278675264",
"13748137141036600567567713408572715602",
"215701483597291948500095342790438194921",
"175256873907415045876956378823013231829",
"303421315633275758136041571322633890971",
"171196419754112202071067277943111113627",
"203641086663321118023500157087716229327",
"228636949552439575756559750639418196772",
"63143090172004059848387568515923027975",
"284816098439102556756270573407972754249",
"307189261393866284440306887585375917961",
"198267006587576039980508060637361569457",
"138965808064534118833297229249266556840",
"92418871167764814255514409925814182603",
"298188333274431523746582729194425426232",
"11643914824237740803244362494874795216",
"271112855576906912879301966931160949574",
"92418871167764814255514409925814182603",
"298188333274431523746582729194425426232",
"253568555149277535380834139793212865848",
"206791041978806225494901878985491860498",
"128863988739988689568039972676577058042",
"330092663479623182892444405741577881134",
"248296729331515064156380139627661126625",
"13570417942193459333786691412248207136",
"11236325333217126709286660800262417287"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-68817478",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/record/RecordSerializationTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"157579316287595315472616550491416623667",
"117697238986701076584550076357596252823",
"51838981530974137121216571769921929959",
"204096827964111372108163226907693801393",
"271054784372342122174443431569977516087",
"87365885202119970644017832532007009939",
"159668565258454141410422715005335053644",
"164030525576196626450574406429468622437",
"94964788896144230099948823228122534690"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-6e671916",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/config/ConfigXmlGeneratorHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "298315840870490046879850171256289759754",
"length": 279
},
"id": "CVE-2026-107726-703b02a4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/record/RecordSerializationTest.java",
"function": "testSerializingRecordReflectively_withUnsupportedFieldType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "294626788530594430690934182939919076305",
"length": 847
},
"id": "CVE-2026-107726-70bff054",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java",
"function": "saveRegistration"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"277154321137949506741978941966794106627",
"208692874061615587947855757874777694348",
"210438522797895893988002235750603546258",
"319462895898329160764557556555237601826",
"94577080116278617048246348456364312158",
"187320146642055775675218250593697960573",
"132201075578705113954795550997835016758",
"250539564149484492258301121830622690908",
"208175951117373718386796734399259410272",
"267975004159650262803617387587259590608",
"258419317970317705266883315783347626714"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-728747cc",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/client/config/YamlClientConfigBuilderTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "231467140563065277232274307364964926484",
"length": 438
},
"id": "CVE-2026-107726-73960a1a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/ConfigXmlGenerator.java",
"function": "appendFilterList"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "84327240662946997940218444581554465176",
"length": 173
},
"id": "CVE-2026-107726-753f5b1f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/AbstractReflectiveSerializationRestrictionTest.java",
"function": "getActualSerializationService"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"275522181845755881703840692570884648806",
"160263557156698081480421637731274047967",
"142319757008980629358775797324966449176"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-7732451a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/config/YamlConfigBuilderTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26428152363443462035033212440523024758",
"length": 541
},
"id": "CVE-2026-107726-775b3d04",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/ConfigXmlGenerator.java",
"function": "sqlConfig"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "71323210312174522029789838625228550951",
"length": 993
},
"id": "CVE-2026-107726-7784f131",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/DefaultSerializationServiceBuilder.java",
"function": "createSerializationService"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "196543611629504155319289728107372152805",
"length": 360
},
"id": "CVE-2026-107726-7b3268f5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java",
"function": "CompactStreamSerializer"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"184863112725908324510631152865789389511",
"204351290964769860943421845589507492268",
"307189261393866284440306887585375917961",
"237439224002792281832901297227837266084",
"200800941689858661003985389204507606054",
"129587318468245995765585120073786317118",
"298188333274431523746582729194425426232",
"271415713149549078718215155908228669093",
"218034594902740508871618085975159901753",
"129587318468245995765585120073786317118",
"298188333274431523746582729194425426232",
"180691647449268834224638468448191967968",
"38938695856391648468848539067744342229",
"129587318468245995765585120073786317118",
"298188333274431523746582729194425426232",
"32097302205020537573541945389170366881",
"205665742246154424341087696927085727453",
"129587318468245995765585120073786317118",
"298188333274431523746582729194425426232",
"262219807908179990326078328438212775582",
"75889009952173577627247639173815076443",
"269601775469400019856991083413576623865",
"320721501470137855292941424041908282026",
"115595786320310932277176003863639371265",
"296383926735956285547868578568012863685",
"138392497466345786970752740163486596177",
"211919497157327037266519175877647477506",
"69587096963269266314596906992353810142",
"320721501470137855292941424041908282026",
"195484463428453948758722624296259190524",
"305402553554657062317136843093857148973",
"255055204059951459596199229812916838747",
"239880164529904384349923158678605997044",
"227249888977375597837406644937597517296",
"262624285816679169323741216299209694572",
"298188333274431523746582729194425426232",
"141124740760622634041392314780055404720",
"279699722306583205127689504876874658380",
"223376378456088107702826825034870936365",
"105140357315583479415364804137065709632",
"171540435303902447790234638883161428494"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-7eb4ee34",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"272095187647322041607051012249108692685",
"280592099540309401010140533186772625976",
"294214549724896069772225374663625967826",
"101308508695630191861216965173868768220",
"212392987699210396698487469826041947516",
"74054504389378632843881388776867116755",
"245542123019855701470029207980355439126",
"155370900634006716012988720900710433050",
"263925782793184703107952739464869270622",
"30499730893862526321328212287035473867",
"52816795884899084957752827870809107304",
"163664575405676403587808007718444271888",
"323189780842865438170999853839822603765",
"150506298298851357438389839993520433721",
"115593052597660037691626604963292173558",
"147871118612112768174635355736491022493",
"103023647691055453976389123407327160777",
"274091551025162005506886164086531059589",
"146009739312512730727934195726632898480",
"225543553077621700656906776428221365269",
"67475132465984493970552743091579333758",
"295933825989267549387175729587983605280",
"56434137730380021219004749960419902921",
"136237637477354424409724931840678730403",
"23634212195180573138848186322091048414",
"220335671742656218473026225616727149568",
"88352867901357055115580500742425748",
"320959046623993836909220565055330614601",
"203679120150750389421924569228304344343",
"43509318893270390318535618216695556916",
"230451955892902671073375491763124325941"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-7f33051d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/AbstractSerializationService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "276849226725221505050513190310608889350",
"length": 125
},
"id": "CVE-2026-107726-7f721e75",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializer.java",
"function": "ReflectiveCompactSerializer"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "54804992091843522932347555632308162985",
"length": 130
},
"id": "CVE-2026-107726-81daaa81",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "readClassBlockedAndAllowedThrows"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "192091094971736683006877266173340526235",
"length": 109
},
"id": "CVE-2026-107726-83524fa3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java",
"function": "matches"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "229806834619727951312519455919548336092",
"length": 122
},
"id": "CVE-2026-107726-8b0b4858",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "readOtherClassAllowed"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "311175314224581069804283306004210196637",
"length": 146
},
"id": "CVE-2026-107726-90afff47",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveSerializationRestrictionTest.java",
"function": "getSerializationServiceToTest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"199215887788479290433759579161539468129",
"193084200414301452805426145879968033496",
"164174812991574900710553613080957241112",
"33303107911910595252664740364631467473",
"165353209121036634832982415616505241630",
"97575321410108280443787797938186371951",
"290757793739217063424592919389579240432"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-941f53ab",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/config/AbstractDomConfigProcessor.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"240527932233713843964536817927277108487",
"258295936953030136884101216851290396524",
"328948767636906341246030508301847518585",
"121859922473356800714508434925469146081",
"238000396867749470217346317527526127995",
"248663886972805503623254084833210208218",
"15606320521842332538240604056296612371",
"112501416113918517541607677312859542133",
"263468576797060672949079660501484241792",
"38880649325593303792994812659700701121",
"165166797086535178644594634498414286079",
"214350321694935170215913886485128597531",
"298382477634942705257679898077014460164",
"54488599139207804100954489667587947838",
"339850520140336294873936665388013156128",
"123613513256763058038346266053665307390",
"283962005702539580982642507387038665547",
"182373806906801671956305539168188016851",
"201701633957269973150659881300044281496",
"128318331975849388837129024690622242445",
"104256143566361538006416387490277128021",
"168888908239902801692609646949144397383",
"266637763540196863239284576806818062249",
"238602290172335098162909829487103222505",
"90484966863519491311496280229796409429",
"200020597253559820891181282667979858050",
"311413718940916772001173225768052728978",
"222666479454782448961931432022467442770",
"212656654188366431478289125324321633015",
"3343966963013017362586941315138967059",
"334272003324146975745235679993719587746",
"250128540883214309693751450521725286367",
"144211482449077814657585205871332510178",
"189102940646252977700475844682007617118",
"48143026161845768096883707190852558105",
"40213719171727349859975351580579524723",
"130439332642475253475097697996205898654",
"200020597253559820891181282667979858050",
"291956326803124177138203949576464744444",
"324566365205412994810743430429625852589",
"284027495730560948878498168091835790814",
"308716466890667695554270020242735079911",
"149404107690362039912053979658790347634",
"3322642487206677296956395886225509795",
"80949580198276998477536372476746140715",
"118397173644363406515166295283765437904",
"67725098828918273233674794560503166512",
"71658512641108566199145280025562961183",
"317040193419379186918949524492799584383",
"138199119669650488814144500619614790426",
"56958107907531356617990941141144235837",
"288095754630498451231382537344431499377",
"260328779257180503827550901408810618079",
"173344648495538456953322061778156980177",
"218462293749871883671950512644896809917",
"278659827141260532633835368706005553089",
"240522512309630831697827857464120036961",
"63023319149774050960125992398873200987",
"307205392590601111736594855168228882724",
"41265890981290683157399982000219642174",
"151133620281706017423553864636908586533",
"281308946708928020235778206926911211784",
"59570131366372197432844638800464614647",
"63768245473545994240907522398071148107",
"85389423327709409042785684610633655314",
"31438510606575808709217579085519187557",
"294386605949126652674463597526872661309",
"339631006732925695271837713240778396084",
"313775395699833484960072739435690786445",
"268463354164632635210738993750525257200"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-9a4555dd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"129567723481387810869678081846234885404",
"89579433460336250620649793285008112017",
"325706329857699764179221144022785063796",
"109773306951604376131768027194370510758"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-9b185f88",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/DefaultCompactWriter.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"131536911882664173105548558730550902209",
"337087341610605238325675378337770109217",
"56028998140456780080129752242825521020",
"114676490202887577481952973382094955460",
"98194566730979851943196322114921609281",
"334243580476836651653348143940769560566",
"56974500912076110494909710150838028433",
"251806369243540932325073823923183112240",
"263103236831925847984614755442223331447",
"214244479061310260296133542236391069298",
"24687263667381413844119007938488725814",
"307645664281739747600807135998310504514",
"6180386029192993298496131455318134530",
"61012220623500107535511527255745272616",
"18530968296926703998137485990865856580",
"222381788029009230857100119029157030681",
"165379375010145471819090203857634637169",
"79538089549696779505451639476153754084",
"328963941212019924826158414343727428368",
"110993602515985013857004339699633429350",
"88279061407215729446432299066630148191",
"175458718788080224274975387075853011403",
"275358512669498897979169448417835814832",
"1240073173075276374201484489788354251",
"309439430275801093055894013113319650207",
"121729454518188003697442680581019214507",
"287784657285444007329212545750918124895",
"285013412095418907875468404478654434046",
"108357913200415569807264697108222520678",
"97395412709700758293265047247653789138",
"214563318441778670668361948530536335706",
"179953137174512743399723023418775343962"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-9e918dc6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveSerializationRestrictionTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "240137279442412680355205752464949808783",
"length": 329
},
"id": "CVE-2026-107726-a07bc8f4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java",
"function": "verifyClassIsCompactSerializable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "279132022379151766738727626172975896919",
"length": 358
},
"id": "CVE-2026-107726-a98ddaec",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testReflectiveSerializer_withFieldsWithOtherSerializationMechanisms"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "182881106528427489612838258821199061915",
"length": 86
},
"id": "CVE-2026-107726-a9e794b1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializer.java",
"function": "isCompactSerializationBlocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "31246207676946770711666159088398094043",
"length": 212
},
"id": "CVE-2026-107726-aa5a3846",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "deserialize"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "311405144784069177019248672288280548239",
"length": 282
},
"id": "CVE-2026-107726-aac8e269",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/record/RecordSerializationTest.java",
"function": "testSerializingRecordReflectively_whenTheRecordClassIsNotSupported"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "169185401557174225756988273348249763166",
"length": 819
},
"id": "CVE-2026-107726-ae8ca5ef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testSerializingClassReflectively_withCollectionTypes_whenCollectionsHasUnsupportedGenericTypes"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "324083603061589150187398643300229080843",
"length": 598
},
"id": "CVE-2026-107726-aea7c439",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java",
"function": "verifyFieldClassShouldBeSerializedAsCompact"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"199215887788479290433759579161539468129",
"193084200414301452805426145879968033496",
"164174812991574900710553613080957241112",
"33303107911910595252664740364631467473"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-b056f16a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/client/config/impl/YamlClientDomConfigProcessor.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"153558711496806132535042201261519705360",
"263577272390933917828341222228703761675",
"256446116897048382634994869798557447819",
"59097098177656177985567675734487720485",
"222578382823319502692820590177387629928",
"177884434428099886089865288184152365726",
"278342104442881365325486937491116514267",
"23351659993926172392668910628811928157",
"87538380522558226651006313748007506363"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-b483dfa2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/record/JavaRecordReader.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "130447758790783822956337235248971226512",
"length": 607
},
"id": "CVE-2026-107726-b63f2272",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/AbstractReflectiveSerializationRestrictionTest.java",
"function": "overrideBlockList"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"83794866798347043458946073589130673032",
"289606070933383646660996811045074268384",
"149153899525935029489713950883273057718",
"109509005491979492106315992242085804809",
"108710224026220839121982822543293697871",
"7606016574878994514961617937110456030",
"310220318165687513029309026553588777938",
"324638804981180083411947221495586529346",
"273512291002700472084303970540925857418",
"16692840470875351136188682357505593195",
"259971137986174392300279835790850742244",
"314225365385790343482319267558939847418",
"23599287662870160900663026926234845145",
"34019992397430594939916546602859183180",
"259163067161956979355203477605820425822",
"88948718357046624830692148611263925632",
"305359117019970539265194770651745496765",
"127942396894387862581809643101911541144",
"125158602516974389440068038140796116238",
"18083642146787744304168052460855416737"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-b714d174",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/CompactSerializationConfig.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "108904085540220817977735972320238952187",
"length": 290
},
"id": "CVE-2026-107726-b78a99d9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testSerializingClassReflectively_withUnsupportedArrayItemType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "44400011205582706823844069980783841014",
"length": 401
},
"id": "CVE-2026-107726-ba581251",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/record/JavaRecordReader.java",
"function": "readRecord"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "137295264131217768588732472177424792768",
"length": 122
},
"id": "CVE-2026-107726-bb28cf98",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializerTest.java",
"function": "readClassBlockedThrows"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "108904085540220817977735972320238952187",
"length": 290
},
"id": "CVE-2026-107726-bc4fb154",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactSerializationTest.java",
"function": "testSerializingClassReflectively_withArrayOfArrayField"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "190245899412705784213351568421130417899",
"length": 32
},
"id": "CVE-2026-107726-bd5bc8a7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/AbstractReflectiveSerializationRestrictionTest.java",
"function": "getSerializationServiceToTest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "144014812192603498702181002133126606035",
"length": 415
},
"id": "CVE-2026-107726-bf76a967",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/CompactSerializationConfig.java",
"function": "CompactSerializationConfig"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "54919373505795476333946543903711478839",
"length": 351
},
"id": "CVE-2026-107726-bfb1c4f4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializer.java",
"function": "readFast"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "110606140357554020631252637133039307815",
"length": 518
},
"id": "CVE-2026-107726-c0cff83c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/ConfigXmlGenerator.java",
"function": "namespacesConfiguration"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "166050878986756663238432119928511223930",
"length": 452
},
"id": "CVE-2026-107726-c139684b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactStreamSerializer.java",
"function": "read"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "42679877104387877122210459544164900250",
"length": 88
},
"id": "CVE-2026-107726-c76bd0e5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java",
"function": "UnsupportedPackagePrefix"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"323407920656760768953557834440749056847",
"145510016472361035790548422749691678340",
"189040284894949922154071665139833852862"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-ccb5e0a7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/client/config/AbstractClientConfigBuilderTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "118899852757467894804291557377190682011",
"length": 154
},
"id": "CVE-2026-107726-d90d04f7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/CompactSerializationConfig.java",
"function": "hashCode"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"308372651830195770035358706454859740130",
"115451028044803528395480772526438495002",
"146421614484595201879276900928797172585",
"220277324765875727415758747279133352849",
"183209468503448333206719140267940781456",
"71720735771131101052523600702101634188",
"324374021184913470706906312456468801119",
"116653733423440049296027553755322929336",
"68114416654364668077904132561009525635",
"91746649373465693683007616735602093448",
"301213115055337362101554623124483908608",
"130291544098580160964913740521609990265",
"150524201410710882435018774034455559841",
"37735994572545210152347261149947215955",
"184300327429816619586700217872154193796",
"116041178967857417706669604316359021752",
"338257694617074846224631658792231950460",
"20653847466194451529821510092794676719",
"65126061714932051623459160360179495664",
"45509346861725392001955425691694116920",
"189569840062266141839798708224943245637",
"224867081440055972673442887669207919639",
"173369428895279906660295785947219830994",
"82129247885647813146310293325828814665",
"219585667437162478049461993628379622079",
"36497263634181312817577848882986003655",
"105437473331808436100823669477552415176",
"216948373121764797555583570973052091665",
"325747487664929852775228808686302435187",
"214362611619862213616225858508385410663",
"329827615808529043701163988192921206562",
"300549313249641469211008954668901501356",
"63300452608710070236667199772404082304",
"321500715147394017069742688767471027295",
"252672835127511857391705565389316633286",
"205175616095339255987784211798145371540",
"61799946931868472217789003062219997758",
"26890944241834475800412840624634921569",
"89811340942450449754072008534279509073",
"12668558067518272928899646758416064676",
"156103444489359666510318058472591107547",
"185002922266013730129603194990654109906",
"43862761074193539570441144614176671657",
"238867229921912062468924604871508473361",
"203258762022386963514411632688364362103",
"66579282165130292561004561937360139381",
"63718797415737655275197407937578524181",
"326660119425319277286009321600859498763",
"129105143334095971176528374282687085870",
"308653245513200708713841649338532691204",
"121051496453425841885163220192590016012",
"202576570183887758925068694925072874921",
"66386637153449019091653584613190434127",
"28816454730314846157747169577544773214",
"312151607383306515572609564643978430185",
"262278103470010247927048775715276636153",
"320385284808964356676961898660468860893",
"58947710903442238701017966593399349702",
"150944532258422101768210279305767539356",
"336202453267235999951371220747330998123",
"174749813966198608711085523461735372439",
"153749634353066377775666633311971947130",
"174388309404491588594061739725662640716",
"117091553840360283708357458969130308747",
"201390635596866493642785591182092900158",
"98494984612304347130518248391620578576",
"310213076497369683982915909789967402365",
"190459967912525712233571244525536861794",
"115400319674201176443374536084977176338",
"17447751345277089551718107088160452186",
"48518205373032799131301236609489773261",
"262985908901161967558501577057597090580",
"209898199823328683033711987457486063002"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-dc2a275f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/AbstractReflectiveSerializationRestrictionTest.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"187247378883569986552073479499642481048",
"42911911085939514939213595348043766284"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-de219b58",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/ConfigAccessor.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "82202995971160450241413493502832529309",
"length": 920
},
"id": "CVE-2026-107726-de33d7c4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/record/JavaRecordSerializer.java",
"function": "populateReadersWriters"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "2560584091021534773085521457990485342",
"length": 304
},
"id": "CVE-2026-107726-e25b82ef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/config/YamlMemberDomConfigProcessor.java",
"function": "handleCompactSerialization"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "162885200104653091539057904778906773261",
"length": 2284
},
"id": "CVE-2026-107726-e477b721",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/ConfigXmlGenerator.java",
"function": "serializationXmlGenerator"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "282847566770735861079420047181349177355",
"length": 513
},
"id": "CVE-2026-107726-e67a6648",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/CompactSerializationConfig.java",
"function": "equals"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"9077907981199605298276360722197902237",
"52991742873875143414187258649171550132",
"257616063034275832020558667685446111292",
"208767918312735221032819384390879694982",
"91695411669024947342887752594447644557",
"289606070933383646660996811045074268384",
"58538359649689141431606811029565570186",
"256830639785544218915313571743975312724",
"68996409081598529809961712769425503242",
"78878531790604781505170250685478969510",
"289384635702925749353497788513217762816",
"225287917834636472276387758988355686409",
"314739184999069876300691177104592236699",
"72706774187341292226306168954172854631",
"4036091121195308182171373649766411694",
"164640502216459029075899131644669936739",
"89230166777669537050604792885613538709",
"73858814777570188075129489764328237712",
"206965059689372285538699230003813344445",
"46813606292839461245961342339068539052",
"79947633158255761844907503415602108231",
"80057861845402426524040895080368671973",
"18524324671373185908658608517280651452",
"22828454058234569671616256686968109166",
"278471156481371155727420331051535216303",
"85264191868666994799011164296825492921",
"214994100758300691931537519077542249625",
"115555290415913658302544455065872081891",
"46166530588964233679413807574853824065",
"313064605179126645312788256076028533867",
"255748823369481814875295309477254764934",
"24369240812245999368209895375727402047",
"246682419180738513061688983865382091236",
"143839562437652090927697851906549061904",
"200819366020679112959632806247705887923",
"283694447374685361273280500695966138852",
"123781972101958402207161948948308565881",
"325019646402509323101880564522397561181",
"323104032042351708755907385059041271988",
"201006380453920064904671982786206628069",
"233790911325925717884501295718827665588",
"111347440356323512359704084019620214868",
"328580448617653304313453127624204936450",
"93246899761387263476034452105469574491",
"155028247443318067978128677552622949694",
"303185523794687489376232073838070910925",
"167936398395729243237935362193669316287",
"47644975266621578609177125490301190316",
"158812740711411380798973822886343467299",
"131290336772317342172407614005137408126",
"176515649472010110281851017618850458389",
"217608462634998431106812859491783930395"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-efebd176",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializer.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"900461320413732463810694906351239931",
"273669056316126657149746794171576111203",
"289569689377369769443216524681534718003",
"302742809792706026503438928648813718009"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-f26496f0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast-spring/src/main/java/com/hazelcast/spring/AbstractHazelcastBeanDefinitionParser.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"103469373646490358779994916742071836333",
"27986385781029693459182012078355505900",
"318552144204943238449720784901874256125",
"110510434983808691780723946262812736866",
"235395998307034150560962999704899928895",
"121184601033012732005027944183559856916",
"333333708018886944067511834121922898060",
"54169036848151850521642554243994269001",
"146891374404668723212285053903547034737",
"300135935980588538337786763819553929091",
"217681374037164341918158215737419729028",
"34585327356403139501394975358091449308",
"149223232503455555536368519192431139449",
"89462538982906710019976715556328597771",
"49782206337691435290558388333203041261",
"336432965285260611779561661888615230221",
"311217416697403532964525806827507880308",
"329578153005226796967537041005815319490",
"117582892237886940272777175202766515137",
"164030525576196626450574406429468622437",
"235239521835315467382180436233874512752",
"64713718278179160001398877199269050907",
"7584042427652519511123618825164975580",
"10845704394498574277083831129995913539",
"232515694533997194164114021752181366938",
"246046099694995296856590819916066298559",
"75003282943860641490512430427240014793",
"305722591131616841551620706228693744666",
"107178915589806395510065314444305646816",
"193972450231873217000802892884116060129",
"291024852316737601387212498585218831207",
"291530151384710846178829436632964614103",
"330723023391579841072633217314135957249",
"188263845530380517097847963768872666645",
"130963646791752005674116041628360258718",
"139959324089709701243958350531066599451",
"121938595521570650502006765759782314657",
"159528758300915587559638603173110084655",
"126538569762542154818285339258931645264",
"102676455990887669759836850228072934252",
"311210230639069362073729250028319036400",
"85136591866039078933219378409800509769",
"47838540835507199828464149755593356387",
"92968450424692173512782591602062195701",
"292504316510237044751928554924482403442",
"329578153005226796967537041005815319490",
"64094519932386858370762413968085506477",
"150278044949484807083478696646742389151",
"91296649585578814683963310487000784548"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-f5893742",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/config/ConfigXmlGenerator.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "148308740048136925982194557610800935755",
"length": 345
},
"id": "CVE-2026-107726-f5f0b137",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/CompactUtil.java",
"function": "canBeSerializedAsCompact"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "194703424448385121316868063531197432863",
"length": 538
},
"id": "CVE-2026-107726-f8bb2016",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/test/java/com/hazelcast/internal/serialization/impl/compact/CompactTestUtil.java",
"function": "getSchemasFor"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"324854570207389589670292036226491829750",
"227580767779747492835233591780883891128",
"186921171651821290234469560780792804915",
"112993391900120693438220709129339445849",
"203645923995684202417086745148319950999",
"301890472972989633148762026068353948506"
],
"threshold": 0.9
},
"id": "CVE-2026-107726-f9da319c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializationUnsupportedException.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "221086528985963397192063766897500386460",
"length": 169
},
"id": "CVE-2026-107726-fcb4d82d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/hazelcast/hazelcast/commit/361979da12f18950c24719db832ca6c5e7c0534f",
"target": {
"file": "hazelcast/src/main/java/com/hazelcast/internal/serialization/impl/compact/ReflectiveCompactSerializationUnsupportedException.java",
"function": "ReflectiveCompactSerializationUnsupportedException"
}
}
]
vanir_signatures_modified
"2026-10-28T10:51:12Z"