Skip to content
OpenAdvisories

Weakness (CWE)

CWE-386: Symbolic Name not Mapping to Correct Object

Base Draft

A constant symbolic reference to an object is used, even though the reference can resolve to a different object over time.

Source: MITRE CWE-386

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.5
    CVE-2026-116486

    Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache

    Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getN…

    easymock objenesis objenesis objenesis Debian Ubuntu
  • Medium 5.9
    CVE-2026-94114

    Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

    Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issu…

    Apache Software Foundation Apache Commons BCEL openjdk-8 openjdk-lts Debian Ubuntu