High (8.3) in mcafee epolicy orchestrator. EPSS 2.7% chance of exploitation in the next 30 days.
Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Severity
CVSS 3.0
8.3 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS
2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)