Lucene search
+L

8 matches found

EUVD
EUVD
added 2026/09/15 9:53 a.m.6 views

EUVD-2026-78363

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured userAttribute through loadAuthenticators without an ObjectInputFilter. Exploitation requires the WebAuthn flow to be...

9.2CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/15 9:53 a.m.5 views

CVE-2026-45051 OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured userAttribute through loadAuthenticators without an ObjectInputFilter. Exploitation requires the WebAuthn flow to be...

9.2CVSS5.8AI score0.00508EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/23 9:16 a.m.27 views

CVE-2026-16723

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS0.15989EPSS
SaveExploits7References1
Vulnrichment
Vulnrichment
added 2026/07/23 8:26 a.m.16 views

CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS6.2AI score0.15989EPSS
SaveExploits7References1
EUVD
EUVD
added 2026/07/23 8:26 a.m.13 views

EUVD-2026-47929

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS6.3AI score0.15989EPSS
SaveExploits7References1
ATTACKERKB
ATTACKERKB
added 2026/07/23 8:26 a.m.15 views

CVE-2026-16723

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS6.3AI score0.15989EPSS
SaveExploits7References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.24 views

PT-2026-63585

Name of the Vulnerable Software and Affected Versions fastjson versions 1.2.68 through 1.2.83 Description A remote code execution RCE issue exists in the fastjson library, specifically impacting Spring Boot applications. This flaw allows an unauthenticated attacker to execute arbitrary code with...

9CVSS7AI score0.15989EPSS
SaveExploits7References15
GithubExploit
GithubExploit
added 2026/07/12 3:14 p.m.185 views

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Sessi...

10CVSS7.2AI score0.99927EPSS
SaveExploits51
Rows per page
Query Builder