Home › CVE Intelligence › CVE-2026-64609
CVSS 9.1 CRITICAL Vulnerability

CVE-2026-64609: Apache Fory: Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserialization

Posted by Chaokun Yang on Jul 21 Severity: moderate Affected versions: Apache Fory (org.apache.fory:fory-core) 0.11.0 before 1.4.0 Apache Fory (org.apache.fury:fury-core) 0.5.0 before 0.11.0 Description: Out-of-bounds r…

9.1CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-64609
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score9.1 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Posted by Chaokun Yang on Jul 21 Severity: moderate

Affected versions:

• Apache Fory (org.apache.fory:fory-core) 0.11.0 before 1.4.0
• Apache Fory (org.apache.fury:fury-core) 0.5.0 before 0.11.0

Description:

Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-64609 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence