CVE-2026-75414

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability.

  • Published Aug 26, 2026
  • CVSS 9.8 critical
  • 0.9% chance of exploitation in the next 30 days (EPSS)

CVE-2026-75414 at the National Vulnerability Database