Apache Storm Client pre-2.8.6 hit by CRITICAL deserialization flaw — authenticated users can achieve RCE on Nimbus/Worker JVMs. Upgrade to 2.8.6 or restrict deserialization classes ASAP. radar.offseq.com/threat/cve-2026-35337-cw... #OffSeq #ApacheSto...
0
1
0
0