News
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
2 weeks ago
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
By info@thehackernews.com (The Hacker News)
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires
More from The Hacker News
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
3 hours from now
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
3 hours from now
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
2 hours from now
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
2 hours from now
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
16 minutes from now