CVE-2026-64678 — Nitrite: Unfiltered Java Deserialization in the Legacy v1 Database Migration Path

According to the CERT title, CVE-2026-64678 concerns unfiltered Java deserialization in Nitrite’s legacy v1 database migration path. The source associates the vulnerability with CWE-502, Deserialization of Untrusted Data.