Insecure Deserialization

Microsoft SharePoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Remote code execution in Microsoft Exchange Server 2013, 2016, and 2019 allows authenticated attackers to execute arbitrary code on the server via insecure deserialization of untrusted data (CWE-502). The vulnerability is confirmed actively exploited (CISA KEV) with publicly available exploit code, and carries an EPSS score of 36.68% (97th percentile), placing it among the highest-risk vulnerabilities. Successful exploitation yields full compromise of confidentiality, integrity, and availability on the targeted Exchange Server.

A possible security vulnerability has been identified in Apache Kafka Connect API. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

A deserialization issue was addressed through improved validation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Apache OFBiz has unsafe deserialization prior to 17.12.06. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Microsoft Exchange Server Unified Messaging service contains a deserialization vulnerability that allows authenticated attackers to execute code as SYSTEM, part of the ProxyLogon exploit chain.

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Microsoft Exchange Remote Code Execution Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Remote code execution in Liferay Portal Community Edition (CE) versions prior to 7.2.1 CE GA2 allows unauthenticated remote attackers to run arbitrary Java code by abusing the JSON web services (JSONWS) interface. This flaw is confirmed actively exploited (CISA KEV) - it was leveraged by the 'FreakOut' botnet - with publicly available exploit code and an EPSS score of 99.78% (100th percentile), placing it among the most likely to be exploited vulnerabilities. It carries a CVSS 9.8, reflecting network-reachable, no-authentication, no-interaction exploitation with full confidentiality, integrity, and availability impact.

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in an arbitrary deserialization if the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

An issue was discovered in Pimcore before 5.7.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

An issue was discovered in CMS Made Simple 2.2.8. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability.". Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

An issue was discovered in Enalean Tuleap 9.6 and prior versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 73.9%.

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Remote unauthenticated attackers can execute arbitrary code on Adobe ColdFusion servers through Java deserialization flaws in the bundled Apache BlazeDS library. This critical vulnerability affects ColdFusion 10 (all updates through 22), ColdFusion 11 (through Update 11), and ColdFusion 2016 (through Update 3). CISA confirms active exploitation in the wild with publicly available exploit code (Exploit-DB 43993), and EPSS scoring at 93.36% (100th percentile) indicates extremely high real-world exploitation likelihood. The network-accessible attack vector requiring no authentication or user interaction makes this a top-priority remediation target for any organization running affected ColdFusion versions.

Remote code execution in IBM Sterling B2B Integrator, Sterling Integrator, and Tivoli Common Reporting allows unauthenticated network attackers to execute arbitrary commands by sending malicious serialized Java objects exploiting the Apache Commons Collections InvokerTransformer class. This vulnerability is confirmed actively exploited in the wild per CISA KEV, with public exploit code available (Exploit-DB 41613) and an exceptionally high EPSS score of 93.49%, indicating near-certain exploitation probability. Affected products include Sterling B2B Integrator 5.2, Sterling Integrator 5.1, and Tivoli Common Reporting versions 2.1 through 3.1.2.1.

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 90.4%.

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 77.9%.

Authenticated users holding only the low-privileged 'Backup Viewer' role on Veeam Backup & Replication can leverage a deserialization flaw to execute arbitrary code as SYSTEM on the backup server, turning a read-only backup monitoring account into full control of the backup infrastructure (CVSS 9.4; CWE-502). The attack is network-reachable (AV:N) and requires no user interaction, but it is not unauthenticated: a valid Backup Viewer account or stolen credentials for that role are mandatory (PR:L), which realistically limits exposure to insiders, credential-theft scenarios, or attackers who have already chained into the environment. The high severity is compounded by the scope change (S:C) and full loss of confidentiality, integrity, and availability across the backup server and connected systems; no public exploit code or confirmed active exploitation was identified at time of analysis.

PHP object injection in FacturaScripts before version 2026.7 allows an authenticated attacker to delete arbitrary files on the server, causing denial of service and potentially enabling a reinstall hijack that resets the application. The flaw is reachable through the multiple-select handling path in WidgetSelect::processFormData(), which passes raw POST data to unserialize() without restricting allowed classes; submitting a crafted serialized XLSXWriter object triggers its __destruct() destructor, which performs the file deletion (config.php and backup data are the notable targets). Exploitation requires a valid authenticated session (CVSS 4.0 vector reports PR:L, so an account is mandatory), and no public exploit code has been identified at time of analysis, so priority is moderate rather than urgent. The vendor has released the fixed 2026.7 version.

Code execution as the gateway service account can be achieved by a trusted party in a Kiteworks Email Protection Gateway cluster that has database replication enabled, via submission of a crafted serialized object that is deserialized without sufficient validation (CWE-502). The flaw is heavily gated: replication is disabled by default, so standard standalone deployments are not exposed, and the attacker must either control a trusted cluster peer or already hold administrative access to the appliance - meaning realistic exploitation is limited to insider abuse, post-compromise lateral movement, or a malicious administrator rather than opportunistic remote attack. All releases below 9.5.1 are affected, a vendor patch (9.5.1) is available, and no public exploit code or confirmed active exploitation was identified at time of analysis; the assessed CVSS is 6.6 (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H), reflecting the high attack complexity and high privileges required.

PHP object injection in the ShortPixel Image Optimizer WordPress plugin through version 6.5.5 allows an authenticated user with Subscriber-level access or higher to pass attacker-controlled data into an unsafe deserialization path, potentially achieving limited confidentiality and integrity impact inside the plugin's scope. Exploitation is conditional and high-complexity: it only yields meaningful escalation if a usable POP gadget chain exists in WordPress core, another installed plugin, or the active theme, and no public exploit identified at time of analysis. The main exposure is sites that permit open Subscriber registration, since the attacker must first hold a low-privileged account.

PHP Object Injection in the EWWW Image Optimizer WordPress plugin before 8.8.0 allows an authenticated user holding author-level or higher privileges to persist a serialized payload into a post meta field that the plugin unserializes when the post is rendered, which can escalate to remote code execution when a suitable POP gadget chain is reachable in EWWW itself or in another installed plugin or theme. Exploitation is conditional: it requires a valid author (or higher) account, the ability to write the offending meta value, and the affected post being rendered, and without a usable gadget chain the outcome stops at object injection rather than code execution. No public exploit code and no confirmed active exploitation have been identified at time of analysis (CISA SSVC records Exploitation: none and Automatable: no), and our independent assessment characterises this as a genuine but conditional risk.

Authenticated users who hold a specifically delegated booking-management capability in the Online Scheduling and Appointment Booking System WordPress plugin (versions 23.2 through 28.3) can chain an unsafe PHP deserialization flaw with a broken access control check on a privileged maintenance routine to inject arbitrary PHP objects, overwrite privileged site options, and read stored integration secrets. The plugin does not restrict that maintenance feature to administrators and does not prevent deserialization of untrusted input, so any account granted this custom capability - which an administrator must explicitly assign, a non-default delegated privilege - can reach the vulnerable path; no end-user interaction is required (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L, score 4.7). Publicly available exploit code exists, but there is no confirmed active exploitation (the issue is not in CISA KEV) and EPSS is only 0.15% (4th percentile), so signals converge on a genuine-but-low real-world priority.

Deserialization of untrusted data in the LangChain4j-agentic module's AgenticScopeSerializer.fromJson path allows an attacker who can already write to an AgenticScope persistence store to trigger arbitrary class instantiation through Jackson's insecure default typing. Affected versions are the 1.5.3, 1.11.10 and 1.18.1 beta lines up to and including 1.5.3-beta10, 1.11.10-beta18 and 1.18.1-beta27, with fixes released in 1.5.3-beta11, 1.11.10-beta19 and 1.18.1-beta28 under advisory GHSA-gmwr-7wmf-mrjm. Publicly available exploit code exists, but effective risk is low: exploitation requires that the application have explicitly enabled AgenticScope persistence (opt-in and off by default) and that the attacker already control the writable backing store, with attack complexity rated high; this issue is not confirmed actively exploited (not in CISA KEV), and EPSS-style scoring is negligible given the reported CVSS base of 2.1.

Remote manipulation of Open Web Analytics through 1.8.1 queue bookkeeping is possible through the Remote Event Queue endpoint when event forwarding is enabled, allowing an unauthenticated network attacker to collide with queue-item primary keys, set far-future delivery timestamps, or preload retry counters. The broader CWE-502 object-injection primitive is not reachable solely by an unauthenticated HTTP caller because the vendor patch confirms HTTP input cannot name a class for unserialize; full deserialization exploitation requires an attacker who can already write to the owa_queue_item table or the queue log file, such as via SQL injection, stolen database credentials, or a restored/tampered table. No public exploit identified at time of analysis; vendor-released patch is version 1.8.2.

Deserialization of untrusted document content in the MongoDB PHP Driver (CWE-502) lets class names embedded in a field such as __pclass be honored when the driver constructs command-monitoring event objects, so an unauthenticated party who controls data flowing into a database operation can cause an application class implementing the driver's persistable interface to be instantiated and have its unserialization method invoked. The flaw only bites applications that (1) register a command monitoring subscriber and (2) pass attacker-controlled data into an operation reflected in monitoring events; impact ranges from benign to severe depending on which gadget classes exist in the deployment, which is why the vendor rates it 6.3 (CVSS 4.0, AV:N/AC:H/PR:N/UI:N/VC:L/VI:L/VA:L) and our independent assessment lands at CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. No public exploit code or confirmed active exploitation has been identified at time of analysis; vendor-released patches are available in driver versions 1.21.10, 2.1.10 and 2.5.3.

BentoPDF 2.8.6 and earlier ships its Timestamp workflow node with an unvalidated TimeStamp Authority URL, so importing a crafted workflow JSON causes the tool to send the SHA-256 message imprint of a user's PDF to an attacker-chosen endpoint. Exploitation requires the victim to import the malicious workflow and actively run its Timestamp node against a document (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N, score 3.4), and it is only effective in the default self-hosted deployment where VITE_CORS_PROXY_URL is unset and the request bypasses the ALLOWED_TSA_HOSTS proxy check. The leaked digest is metadata only - it can confirm a document matches a known file or correlate the same document across users, but never reveals document contents, and no public exploit has been identified at time of analysis; this is a low-real-risk information disclosure.

Deserialization of untrusted data in Microsoft Recommenders (recommenders-team/recommenders) up to and including version 1.2.1 lets an attacker who supplies a crafted MIND dictionary or vocabulary artifact execute arbitrary code when the newsrec iterator at recommenders/models/newsrec/io/mind_iterator.py calls pickle.load. The issue is gated on user interaction rather than a listening service: a developer or automated training pipeline must deliberately point the MIND iterator at the poisoned serialized dict, which is why the vendor's CVSS 4.0 rating is only 5.1/PR:L/UI:P while the independent assessment rates it CVSS:3.1 AV:N/AC:L/PR:N/UI:R with C:H/I:H/A:H. Publicly available exploit code exists (the public GitHub issue report recommenders-team/recommenders#2368), but there is no evidence of confirmed active exploitation and no KEV listing; the project was informed early via that issue but has not responded, and no vendor-released patch has been identified at time of analysis.

Deserialization in Dask's from_npy_stack() array loader (dask/array/core.py) allows an attacker who can supply or influence the npy-stack path/directory being loaded to trigger unsafe object deserialization, potentially yielding code execution in the victim's process with high confidentiality, integrity and availability impact (assessed CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected are Dask versions through 2026.8.0; this is not exploitation of a listening network service, since successful abuse requires the victim application to deliberately call from_npy_stack() on the attacker-influenced data source (UI:R). Publicly available exploit code exists and the flaw was disclosed via a public GitHub issue, but there is no indication of confirmed active exploitation (CISA KEV) at time of analysis.

PHP object injection in CuteNews 2.1.2 allows remote attackers to overwrite internal request variables - including __referer - by submitting a base64-encoded serialized PHP payload through the __post_data parameter handled by cn_parse_url(). The flaw is network-reachable and unauthenticated (PR:N) but carries high attack complexity (AC:H) because any impact beyond variable overwrite depends on a usable PHP gadget chain existing in the codebase, and all three impact metrics are rated Low. Risk is tempered by an EPSS score of just 0.23% (14th percentile), no CISA KEV listing, and no public exploit code identified at time of analysis.

Unsafe pickle deserialization in the core load APIs of DLR-RM stable-baselines3 up to 2.9.0 lets an attacker who supplies a crafted model, replay buffer, or VecNormalize artifact achieve arbitrary code execution when a victim loads it via PPO.load, load_replay_buffer, or VecNormalize.load. The flaw is a CWE-502 pickle deserialization issue with no safe-mode gate or opt-in guard in these functions, and publicly available exploit code exists; the practical attack path is sharing or publishing a poisoned reinforcement-learning checkpoint that the victim is induced to load. Our assessment scores it CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - remote delivery is possible but exploitation still hinges on a victim choosing to load the malicious file, and successful loading grants full confidentiality, integrity, and availability impact in the victim's process.

Unsafe deserialization in dmlc DGL (Deep Graph Library) up to and including 2.1.0 allows arbitrary code execution when a victim loads a crafted DGL graph info artifact through the load_info / _read_torch_data path in utils.py, which hands an attacker-influenced 'path' to torch.load and therefore to Python's pickle machinery. Per the authoritative assessment this is an untrusted-input/supply-chain scenario rather than a network-service exploit: no memory-safety trigger exists and DGL exposes no network-facing listener by default, so the attacker must deliver a malicious serialized file (shared dataset, model artifact, or downloaded graph) and induce the user to open it, which is why the assessed vector requires user interaction. A publicly available exploit code exists (linked to GitHub issue dmlc/dgl#7932) and the maintainers were notified via issue report but had not responded at the time of analysis; note that CVE-2026-94092 is not listed in CISA KEV, so there is no confirmation of active exploitation. Vendor data records a CVSS 4.0 score of 5.1 (AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/E:P), while our independent assessment rates the practical impact higher (CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) because successful unpickling yields full code execution in the victim's context.

Deserialization of untrusted data in gensim's SaveLoad.load (gensim/utils.py) lets an attacker execute arbitrary code on any host that loads a crafted model file, affecting gensim versions up to and including 4.4.0 as well as the current develop HEAD. The flaw is reachable through the public model-loading API and requires the victim to load an attacker-supplied serialized model or vector file (no authentication is needed to craft or deliver the file; the assessed CVSS:3.1 vector is AV:N/AC:L/PR:N/UI:R with high confidentiality, integrity and availability impact, while the vendor-feed CVSS 4.0 score of 5.1 reflects a lower PR:L/E:P reading of the same issue). Publicly available exploit code exists, and because the maintainer closed issue #3663 without a comment, PR, or fix, no vendor patch is available and defense currently depends entirely on refusing to load untrusted files or wrapping the load path in a restricted unpickler.

Adjacent-network attackers can drive the Name Service component of IBM WebSphere Application Server 8.5 and 9.0 into a denial-of-service condition by supplying maliciously crafted serialized data to the CORBA/IIOP naming endpoint, which the JVM then deserializes. The flaw is unauthenticated and requires no user interaction (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 6.5), so the practical barrier is network position rather than credentials: the attacker must be able to reach the Name Service on the same or an adjacent network segment, and default configurations leave that service listening on the network. Impact is confined to availability - no loss of confidentiality or integrity is assessed - and no public exploit code or confirmed active exploitation has been identified at time of analysis; IBM has published a vendor fix.

Cross-site scripting in udecode Plate's core HTML deserialization APIs allows attacker-controlled script to execute in a consuming application's origin when untrusted or cross-user HTML is deserialized and then loaded by another user; affected builds are all versions prior to 53.3.11 plus the discontinued 54.0.0-beta.0 and 54.0.0-beta.1 prereleases. The pre-fix code parsed supplied HTML strings in the active document, so certain attributes triggered browser behavior before the markup was converted into editor nodes; the assessed vector (CVSS 6.1, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) reflects network-delivered input needing no authentication (PR:N) but requiring victim interaction (UI:R) and a scope change, and exploitation is only realistic where the consuming application itself wires attacker-influenced HTML into these APIs. There is no public exploit identified at time of analysis and no KEV listing, but the vendor has shipped a fix in 53.3.11.

OpenBankProject OBP-API builds up to and including 1.10.1 deserialize attacker-controlled data through the KryoInjection.invert routine in the Redis cache handler (code/api/cache/Redis.scala), which can lead to code execution or data tampering by anyone able to plant a crafted Kryo-serialized object in the API's Redis cache. Exploitation is rated difficult: the supplied CVSS 4.0 vector requires high privileges (PR:H) and high attack complexity (AC:H), and the scored impact is limited (VC:L/VI:L/VA:L, score 1.2). Public exploit material exists via the referenced GitHub issue (GHSA-889g-wggr-jrrq / issue 2888), but there is no CISA KEV confirmation of active exploitation, and the upstream project had not responded to the issue report at the time of analysis.

PHP object injection in October CMS (composer package october/system) allows an attacker-controlled serialized payload stored in a widget session key to be passed to unserialize() without an allowed_classes restriction, enabling instantiation of arbitrary classes and reachable gadget chains — potentially yielding PHP code execution as the web server user. The flaw is reachable only when the niche opt-in cms.safe_mode setting is enabled and a backend user with CMS markup editing access is not fully trusted, so standard production installations with Safe Mode off are not exposed. Public proof-of-concept code exists and vendor patches ship in 3.7.17 and 4.2.x; exploitation is not confirmed in CISA KEV, and the vendor's own CVSS score (3.3) is far below what the stated code-execution impact would normally imply.

Unsafe deserialization in FedML up to version 0.9.6 allows low-privileged remote attackers to potentially execute arbitrary code by manipulating the `s3_key_str` argument passed to `S3Storage.read_model` in the MQTT+S3 communication backend. The function deserializes model data retrieved from S3 without adequate input validation, meaning an attacker who can influence the S3 key or the object stored at that key can supply a crafted malicious payload. No patch has been released; the vendor has not responded to the coordinated disclosure filed in GitHub issue #2267. No public exploit code or CISA KEV listing has been identified at time of analysis.

Unsafe PHP deserialization in PHPGurukul Small CRM 4.0 exposes the login endpoint to object injection attacks via the uncontrolled `geopluginURL` parameter passed directly to `unserialize()` in `/crm/login.php`. A remote, unauthenticated attacker who can supply a crafted serialized payload to the login success handler may trigger arbitrary object instantiation, with actual impact constrained by available PHP gadget chains in the application. A public proof-of-concept exploit exists, though the vendor-reported CVSS 4.0 score of 2.9 and AC:H rating indicate exploitation is difficult and real-world impact is assessed as limited integrity degradation rather than full compromise.

Deserialization of untrusted data in the MailReceiver component of lenve vhr 1.0-SNAPSHOT enables authenticated remote attackers to manipulate application state and potentially execute arbitrary code via crafted serialized payloads. A YAKIT-based proof-of-concept exploit is publicly available on GitHub. The CVSS 4.0 score of 5.3 reflects low-privilege authentication as a prerequisite and limited per-component impact, though Java deserialization flaws can exceed their scored impact if exploitable gadget chains exist in the runtime classpath.

Stack overflow denial-of-service in msgpack-java through 0.9.12 allows unauthenticated remote attackers to crash individual deserialization requests by sending crafted payloads containing deeply nested MessagePack arrays or maps. The root cause is unbounded recursion in `MessageUnpacker.unpackValue()` (lines 646-664), which processes nested structures without any depth limit, exhausting the JVM thread stack and throwing an unhandled `StackOverflowError`. No public exploit or active exploitation has been identified; impact is limited to per-request availability disruption rather than full service termination.

Denial of service in Apache ActiveMQ Artemis and Apache Artemis message brokers allows authenticated clients holding MANAGE permission to crash broker processing threads by submitting crafted management-via-messaging requests that trigger unsafe Java deserialization. The deserializer processes method parameters the broker never actually uses, permitting gadget-chain payloads that consume excessive CPU and pin the thread pool. Both the legacy ActiveMQ Artemis lineage (1.3.0-2.44.0) and the newer Apache Artemis project (2.50.0-2.56.0) are affected; no public exploit or active exploitation has been identified at time of analysis.

PHP Object Injection in the Ninja Forms WordPress plugin (all versions through 3.14.6) allows authenticated administrators to inject arbitrary PHP objects during the form import process via unsafe deserialization in WPN_Helper::build_nf_cache(). The vulnerability itself carries no inherent impact - exploitation requires a separate POP (Property Oriented Programming) chain supplied by another co-installed plugin or theme. When a POP chain is present, the impact escalates to arbitrary file deletion, sensitive data retrieval, or remote code execution, depending on what the chain enables. No public exploit has been identified at time of analysis, and CISA KEV does not list this CVE.