37128 matches found
PT-2026-87090
🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/BqCC52NTwG Ivanti CyberSecurity InfoSec...
PT-2026-87027
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contributor-level access and above, to injec...
CVE-2026-77484: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-47297: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
PT-2026-88067
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-81385: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
PT-2026-87665
Name of the Vulnerable Software and Affected Versions Windows IP Address Management IPAM Service affected versions not specified Description Deserialization of untrusted data in the Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...
PT-2026-87216
Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...
CVE-2026-12650: Deserialization of Untrusted Data
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
ALSA-2026:64807 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
PT-2026-87089
Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM versions prior to 2026.2 Description A deserialization of untrusted data issue allows a remote authenticated attacker to execute arbitrary code on the server. Deserialization is the process of converting a data stream...
CVE-2026-77092: Deserialization of Untrusted Data
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...
CVE-2026-12651: Deserialization of Untrusted Data
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
RHEL 10 : valkey (RHSA-2026:64796)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64796 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists,...
RHEL 9 : valkey (RHSA-2026:64807)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64807 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, se...
Linux Distros Unpatched Vulnerability : CVE-2026-86317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cp...
ROS-20260908-73-0012
The vulnerability in Java-11-openjdk is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
PT-2026-88167
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...