CVE-2026-12745

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

EUVD-2026-72797

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating n...

Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

Microsoft Office Publisher Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77092

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

EUVD-2026-72724

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

CVE-2026-77092

Commvault Content Extractor contained a deserialization of untrusted data flaw affecting privilege management , enabling privilege escalation . The NVD-assigned CVSS 3.1 score is 9.8 (CRITICAL) with a network vector and no required privileges, while the CNA-assigned CVSS 4.0 score is 7.3 (HIGH) w...

CVE-2026-77092 Content Extractor Privilege Escalation

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

CVE-2026-45659

CVE-2026-45659 La deserialización de datos no confiables en Microsoft Office SharePoint permite a un atacante autorizado ejecutar código a través de la red. ⚡ Uso simple Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones ...

CVE-2026-71374

Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...

CVE-2026-71374 Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container

Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...

EUVD-2026-72653

Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...

CVE-2025-53690

CVE-2025-53690 Vulnerabilidad de deserialización de datos no confiables en Sitecore Experience Manager XM y Sitecore Experience Platform XP que permite inyección de código. Esta vulnerabilidad afecta a Experience Manager XM: hasta la versión 9.0; Experience Platform XP: hasta la versión 9.0. ¿Cóm...

PT-2026-87090

🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/BqCC52NTwG Ivanti CyberSecurity InfoSec...

PT-2026-86996

Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...

CVE-2026-7861

Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service Management allows Code Injection. This issue affects CSM Customer Service Management: before 8.0.3...

CVE-2024-11393

CVE-2024-11393 Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en el modelo MaskFormer de Hugging Face Transformers Resumen general y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona a...

CVE-2026-7861 Code Injection in Next4Biz's CSM (Customer Service Management)

Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service Management allows Code Injection. This issue affects CSM Customer Service Management: through 07092026. NOTE: The vendor is continuing efforts to remediate the vulnerability...