datavane tis vulnerabilities

Latest datavane tis CVEs

Newest publication first

1. CVE-2026-24816 Cookie Security Vulnerabilities in datavane/tis

   Published 2026-01-27

   Critical·CVSS 10.0 EPSS 0.29%

   Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in datavane tis (tis-console/src/main/java/com/qlangtech/tis/runtime/module/action modules). This vulnerability is associated with program files ChangeDomainAction.Java. This issue affects tis: before v4.3.0.

2. CVE-2026-24815 A XStream Security Vulnerability in XML Deserialization in datavane/tis

   Published 2026-01-27

   Critical·CVSS 10.0 EPSS 0.35%

   Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules). This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.