CVE-2026-33701Suited to automated attack · CISA
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
CVSS score
9.3
EPSS probability
%1.1
Risk score
0.1
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2026-33701 Unsafe Deserialization in OpenTelemetry Java Agent RMI Instrumentation
Makefile Go / Python
Similar Vulnerabilities
9.0
CVE-2021-45046 Actively exploited
Incomplete fix for Apache Log4j vulnerability
M
WorkaroundEPSS %100
9.8
CVE-2024-56325
Apache Pinot Vulnerable to Authentication Bypass
M
Patch status unknownEPSS %80
7.5
CVE-2020-13935
Vulnerability in N/a Apache Tomcat
N
Patch verifiedEPSS %87
7.5
CVE-2024-38819
Spring Framework Path Traversal vulnerability
M
Patch verifiedEPSS %56
7.0
CVE-2020-9484
Vulnerability in N/a Apache Tomcat
N
Patch verifiedEPSS %56
7.5
CVE-2021-23450
Prototype Pollution
N
Patch verifiedEPSS %30
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-33701"