369 matches found
CVE-2026-16723
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required. As there is no fix for 1.x branch, users should upgrade to versions 2...
CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
EUVD-2026-47929
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
CVE-2026-16723
CVE-2026-16723 is a remote-code-execution vulnerability in Fastjson 1.2.68–1.2.83 that is exploitable under stock/default configuration without AutoType or a gadget. Connected docs confirm the attack chain can occur in Spring Boot fat‑JAR deployments: an attacker controls the @type value, Fastjso...
CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
CVE-2026-16723
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
Fastjson1.2.83_EXP
Fastjson 1.2.83 @JSONType RCE Fastjson 1.2.83 RCE exploitatio...
fastjson-jsontype-rce-hzhsec
Fastjson 1.2.83 RCE Vulnerability Environment & PoC QVD-2026-...
VulnCheck KEV: CVE-2026-16723
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
CVE-2026-16723: Improper Input Validation
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
Fastjson1.2.83-exploit-tool
Fastjson 1.2.83 @JSONType RCE Exploit Tool A Fastjson 1.2.8...
FastJson-JsonType-RCE
Fastjson @JSONType RCE Exploit Toolkit ⚠️ Only for authoriz...
Fastjson-1.x-Gadget-free-RCE
No d...
AI-for-fastjson-1.2.83-RCE-skill
fastjson-1.2.83-RCEskill AI agent skill for detecting and exp...
Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson
Huawei has recently realized the Remote Code Execution RCE vulnerability in Fastjson. A remote attacker can exploit this vulnerability by sending crafted JSON data. Successful exploitation of this vulnerability may lead to remote code execution. If you have deployed Huawei Next-Generation Firewal...
fastjson-1.2.83-rce-jdk8-jdk25
Generate probes with 10-25 fd entries: java -cp "poc:poc/lib/a...
FastjsonSecurity
fastjson 1.2.661.2.83 @JSONType 注解远程代码执行漏洞的测试复现环境。...