CVE-2026-82604— BareBones BBEdit Java Language recursion
Quick assessment
Affected
BareBones BBEdit
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 BareBones BBEdit（版本 15.5.5 及更早版本）中发现了一个缺陷，受影响的是 Java 语言模块中的一个未知函数。该缺陷会导致非受控递归（uncontrolled recursion），并且攻击者可以远程利用此漏洞。建议将软件升级至 16.0 版本以修复此问题，您应升级受影响的组件。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82604
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BareBones BBEdit Java Language recursion
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should upgrade the affected component.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的递归
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-82604
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82604
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-82604 (1)
Other References for CVE-2026-82604 (6)
-
https://vuldb.com/cve/CVE-2026-82604 third-party-advisory
-
-
https://vuldb.com/submit/892839 third-party-advisory
IV. Related Vulnerabilities
Same weakness: CWE-674
-
CVE-2026-78228
Unbounded handle_error recursion enables denial of service i -
CVE-2026-75758
Unbounded recursion between Inspect.List charlist rendering -
CVE-2026-73209
IMAP服务栈溢出拒绝服务漏洞 -
CVE-2026-81724
NLTK before 3.10.3 Denial of Service via Uncontrolled Recurs -
CVE-2026-16781
SVG File Parsing Stack Exhaustion Vulnerability in Autodesk
V. Comments for CVE-2026-82604
No comments yet