CVE-2026-6009 — Jaspersoft Library Deserialisation Vulnerability

Description (CNA)

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Affected (CNA)

Vendor / product	Versions
Jaspersoft / JasperReports Library Community Edition	affected 0 through 7.0.6
Jaspersoft / Jaspersoft Studio Community Edition	affected 0 through 7.0.6
Jaspersoft / JasperReports Server	affected 0 through 10.0.0
Jaspersoft / JasperReports Library Professional	affected 0 through 10.0.0
Jaspersoft / Jaspersoft Studio Professional	affected 0 through 10.0.0
Jaspersoft / JasperReports IO Professional	affected 0 through 10.0.0
Jaspersoft / JasperReports IO At-Scale	affected 0 through 10.0.0
Jaspersoft / JasperReports Web Studio	affected 0 through 10.0.1

CWE

CWE-502

References

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.