CVE-2026-7303
low
CVSS v3
3.7
CVSS v2
2.6
VIR risk
3.7
Description
xxl-job has a Resource Injection issue
Predictions
Exploit likelihood
47%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | com.xuxueli:xxl-job-admin | <3.4.0 | 3.4.0 |
| MAVEN | com.xuxueli:xxl-job-admin | < 3.4.0 | 3.4.0 |
References
- https://github.com/xuxueli/xxl-job/
- https://github.com/xuxueli/xxl-job/commit/d24e4ccd6073cc75305e1d3b9c29bc8db7437e7a
- https://github.com/xuxueli/xxl-job/issues/3936
- https://github.com/xuxueli/xxl-job/releases/tag/v3.4.0
- https://vuldb.com/submit/803075
- https://vuldb.com/vuln/359959
- https://vuldb.com/vuln/359959/cti
- https://nvd.nist.gov/vuln/detail/CVE-2026-7303
- https://github.com/xuxueli/xxl-job
- https://github.com/advisories/GHSA-gw2x-mfwr-h46p
CWEs
CWE-99
Verify integrity in audit chain (admin only). AS-IS.