CWE-695: Use of Low-Level Functionality

The product uses low-level functionality that is explicitly prohibited by the framework or specification under which the product is supposed to operate.

1 tracked CVEs are classified under this weakness.

Highest-risk vulnerabilities

• CVE-2026-30960 — RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface

Recently published

• CVE-2026-30960 — RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface

More specific weaknesses

• CWE-111 — Direct Use of Unsafe JNI
• CWE-245 — J2EE Bad Practices: Direct Management of Connections
• CWE-246 — J2EE Bad Practices: Direct Use of Sockets
• CWE-383 — J2EE Bad Practices: Direct Use of Threads
• CWE-575 — EJB Bad Practices: Use of AWT Swing
• CWE-576 — EJB Bad Practices: Use of Java I/O

Browse the full CVE database