https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-56518.htmlhttps://patchthecve.com/cve/CVE-2024-56518.htmlWed, 17 Jun 2026 08:12:17 +0000CRITICAL 9.8: Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), which can be uploaded at the /cluster-connections URI.https://patchthecve.com/cve/CVE-2023-45859.htmlhttps://patchthecve.com/cve/CVE-2023-45859.htmlWed, 17 Jun 2026 06:29:40 +0000HIGH 7.6: In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.https://patchthecve.com/cve/CVE-2023-45860.htmlhttps://patchthecve.com/cve/CVE-2023-45860.htmlWed, 17 Jun 2026 06:29:40 +0000MEDIUM 6.5: In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.