37605 matches found
CVE-2026-73793: Deserialization of Untrusted Data
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...
CVE-2026-55573: Deserialization of Untrusted Data
e107 is a content management system CMS. Prior to 2.3.7, install.php decodes the attacker-controlled previoussteps POST parameter and passes it to unserialize at file scope and again in the einstall constructor without restricting allowed classes. The installer remains accessible after a normal...
PT-2026-113712
The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object...
CVE-2026-106599: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...
CVE-2026-108291: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...
Security Updates for Microsoft SQL Server (October 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. CVE-2026-65674 - Heap-based buffer overflow...
Security Updates for Microsoft SQL Server (October 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. CVE-2026-65674 - Heap-based buffer overflow...
CVE-2026-65674
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-49950
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv passing unvalidated data to cloudpickle.loads, which...
CVE-2026-105442
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service...
GHSA-4J9V-H7PP-725H Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
GHSA-4W5F-7JP2-W48G Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
EUVD-2026-100605
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-65674
A deserialization of untrusted data vulnerability exists in Microsoft SQL Server , which allows an authorized attacker to execute arbitrary code over a network. While specific affected versions are not detailed in the description, Microsoft has released security updates to address this issue. Use...
CVE-2026-49950
Xorbits Xoscar versions through 0.11.2 are vulnerable to an unauthenticated deserialization flaw. The root cause is the insecure use of cloudpickle.loads() on unvalidated data received via SocketChannel.recv() over the actor-pool TCP channel . This allows a remote attacker to trigger pickle ——red...
CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv passing unvalidated data to cloudpickle.loads, which...
CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv passing unvalidated data to cloudpickle.loads, which...
CVE-2026-93905 IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...