PT-2026-4644 · Assertj · Assertj

Wxt201 · Published 2026-01-24 · Updated 2026-03-25 · CVE-2026-24400

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions AssertJ versions prior to 3.27.7

Description The software update addresses an unspecified issue. No details are available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited.

Recommendations Update to version 3.27.7.

Exploit

Fix

DoS

XXE

Weakness Enumeration

CWE-611

Related Identifiers

AZL-75431

BDU:2026-01709

CVE-2026-24400

GHSA-RQFH-9R24-8C9R

OPENSUSE-SU-2026:10106-1

OPENSUSE-SU-2026:20298-1

SUSE-SU-2026:0344-1

SUSE-SU-2026:20604-1

Affected Products

Assertj

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24400.json · Exploit
• https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r · Vendor Advisory
• https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-24400 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-24400 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-24400 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20298-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20604-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rqfh-9r24-8c9r · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10106-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-75431 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24400 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01709 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-24400 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0344-1 · Vendor Advisory