162 matches found
Qwik - Unauthenticated RCE via server$ Deserialization
Qwik =1.19.0 contains an insecure deserialization vulnerability in the server$ RPC mechanism, letting unauthenticated attackers execute arbitrary code remotely, exploit requires require availability at runtime. id: CVE-2026-27971 info: name: Qwik - Unauthenticated RCE via server$ Deserialization...
9.8CVSS5.9AI score0.05416EPSS
SaveExploits1References2
20