CVE-2026-116058 in Activiti

Prediction

by VulDB Data Team • 10/24/2026

A vulnerability was found in <a href="/product/alfresco:activiti">Alfresco Activiti up to 7.21.0-rc.692</a>. Affected by this issue is the function <code>JuelScriptEngine.eval</code> of the file <em>JuelScriptEngine.java</em>. Performing a manipulation results in code injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-426142
• CPE: VulDB
• CWE: CWE-94 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: medium

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-116058
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-116058
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-116058/