Insecure Deserialization

Funadmin up to version 7.1.0-rc4 contains an unsafe deserialization vulnerability in the AuthCloudService.php getMember function that allows authenticated remote attackers to manipulate the cloud_account parameter and execute arbitrary code. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early notification.

Deserialization of untrusted data in Lorem Ipsum Books & Media (lorem-ipsum-books-media-store) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in Extreme Store (extremestore) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in Themesflat Elementor (themesflat-elementor) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in SevenHills (sevenhills) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in KindlyCare (kindlycare) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in Capella (capella) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in Prestige (prestige) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce is affected by deserialization of untrusted data (CVSS 8.8).

Deserialization of untrusted data in PhotoMe (photome) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5.9. [CVSS 8.8 HIGH]

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through <= 9.1.1. [CVSS 8.8 HIGH]

Deserialization of untrusted data in Ippsum (ippsum) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery is affected by deserialization of untrusted data (CVSS 8.8).

A WP Life Modal Popup Box modal-popup-box is affected by deserialization of untrusted data (CVSS 8.8).

Deserialization of untrusted data in Travelicious (travelicious) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in Nestin (nestin) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of untrusted data in PatioTime (patiotime) WordPress theme allows PHP Object Injection, potentially enabling remote code execution through POP chains.

Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, or privilege escalation.

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. [CVSS 7.8 HIGH]

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. [CVSS 7.8 HIGH]

A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. [CVSS 7.8 HIGH]

A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. [CVSS 7.8 HIGH]

JeecgBoot 3.9.1's RAG knowledge controller fails to properly validate ZIP file imports, allowing authenticated remote attackers to trigger unsafe deserialization with public exploit code available. The vulnerability requires authentication and complex attack execution but could enable information disclosure or integrity compromise. No patch is currently available from the vendor.

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution. [CVSS 8.8 HIGH]

WP eCommerce WordPre versions up to 3.15.1 is affected by deserialization of untrusted data (CVSS 6.5).

Denial of service in SAP NetWeaver's JMS service stems from unsafe deserialization of malicious objects, allowing authenticated administrators with local access to crash the application. The vulnerability requires high privileges and local access but carries no risk to confidentiality or integrity. No patch is currently available.

Unsafe deserialization in yuan1994 tpadmin versions up to 1.3.12 allows remote attackers to execute arbitrary code via the WebUploader preview.php component without authentication. Public exploit code exists for this vulnerability, and affected installations running unsupported versions face immediate risk. The flaw enables complete system compromise with no patch available from the maintainer.

CraftCMS 3 vCard Plugin 1.0.0 has an insecure deserialization vulnerability allowing unauthenticated remote code execution through crafted vCard data.

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). [CVSS 7.5 HIGH]

Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. [CVSS 8.4 HIGH]

pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. The library uses Python pickle to deserialize CMap cache files without validation. [CVSS 6.5 MEDIUM]

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process. [CVSS 7.8 HIGH]

Unsafe deserialization in Bolo Solo up to version 2.6.4 through the SnakeYAML component allows authenticated attackers to execute arbitrary code remotely via the importMarkdownsSync function. Public exploit code exists for this vulnerability and no patch is currently available. Authenticated users with access to the backup functionality can trigger this flaw to compromise affected systems.

SolarWinds Web Help Desk has a second deserialization vulnerability (EPSS 11.9%) providing another unauthenticated RCE path alongside CVE-2025-40551.

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules). This vulnerability is associated with program files XmlFile.Java.

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. [CVSS 3.7 LOW]

Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. [CVSS 7.8 HIGH]

Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. [CVSS 7.8 HIGH]

Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu ShockLine. [CVSS 7.8 HIGH]

Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5. [CVSS 8.8 HIGH]

ThemeREX Sound/musicplace WordPress theme has an insecure deserialization vulnerability enabling PHP object injection and potential remote code execution.

strongholdthemes Tech Life CPT techlife-cpt is affected by deserialization of untrusted data (CVSS 8.8).

strongholdthemes Dental Care CPT dentalcare-cpt is affected by deserialization of untrusted data (CVSS 8.8).

Deserialization of Untrusted Data vulnerability in designthemes OneLife onelife allows Object Injection.This issue affects OneLife: from n/a through <= 3.9. [CVSS 8.8 HIGH]

Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through <= 8.0. [CVSS 8.8 HIGH]

Deserialization of Untrusted Data vulnerability in designthemes Vivagh vivagh allows Object Injection.This issue affects Vivagh: from n/a through <= 2.4. [CVSS 8.8 HIGH]

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through <= 4.1.1. [CVSS 8.8 HIGH]

Deserialization of Untrusted Data vulnerability in designthemes Kids Heaven kids-world allows Object Injection.This issue affects Kids Heaven: from n/a through <= 3.2. [CVSS 8.8 HIGH]

Consult Aid WordPress theme has an insecure deserialization vulnerability allowing object injection that can lead to remote code execution.

Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through <= 4.10.1. [CVSS 8.5 HIGH]

Remote code execution in Tendenci CMS versions 15.3.11 and below allows authenticated staff users to execute arbitrary code through unsafe pickle deserialization in the Helpdesk module's reporting function. The vulnerability stems from incomplete patching of CVE-2020-14942, where the run_report() function continues to use unsafe pickle.loads() despite the ticket_list() function being corrected. Public exploit code exists for this issue, though impact is limited to the privileges of the application's runtime user.

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the target `Receipt` structure is accessed out of bounds. [CVSS 7.4 HIGH]

PLY (Python Lex-Yacc) library 3.11 has an unsafe feature enabling remote code execution through pickle deserialization of cached parser tables, with EPSS 0.91%.

The extension extends TYPO3’ FileSpool component, which was vulnerable to Insecure Deserialization prior to TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-sa-2026-004 .

Changjetong T+ (through 16.x) has .NET deserialization RCE in an AjaxPro endpoint. Attacker-controlled JSON triggers deserialization of malicious .NET types. PoC available.

Arbitrary code execution in LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 occurs when BGEM3Index.load_from_disk() calls pickle.load() on a multi_embed_store.pkl file read from an attacker-controlled persist_dir. A victim who loads a maliciously crafted index directory executes attacker-supplied code in their own process. Publicly available exploit code exists (huntr bounty submission), though EPSS is low (0.08%) and it is not listed in CISA KEV, so there is no public exploit identified as actively exploited.

Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum: 24.3.13 and earlier. [CVSS 8.8 HIGH]

Newsletters WordPress plugin by Tribulant (through 4.11) is vulnerable to PHP object injection through deserialization of untrusted data, potentially leading to RCE via POP chains.

Unsafe deserialization in Bio-Formats up to version 8.3.0 allows local attackers to execute arbitrary code or cause denial of service by crafting malicious .bfmemo cache files that are automatically loaded during image processing without validation. The Memoizer class deserializes untrusted data from these files, enabling potential remote code execution if suitable Java gadget chains are available on the classpath. No patch is currently available for this vulnerability (CVSS 7.8).

RustFS is a distributed object storage system built in Rust. [CVSS 4.0 MEDIUM]

DZS Video Gallery WordPress plugin (through 12.37) is vulnerable to PHP object injection through insecure deserialization. An unauthenticated attacker can inject arbitrary PHP objects, potentially achieving code execution through POP chains.

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25. [CVSS 8.8 HIGH]

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0. [CVSS 8.8 HIGH]

A security vulnerability has been detected in milvu versions up to 2.6.7. is affected by improper input validation (CVSS 6.3).

A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::__destruct of the file core/admin/medias.php of the component Media Management Module. [CVSS 4.7 MEDIUM]

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at `feast/sdk/python/feast/infra/compute_engines/kubernetes/main.py`. [CVSS 7.8 HIGH]

PHP deserialization in EyouCMS up to version 1.7.7 allows authenticated remote attackers to pass a malicious serialized payload via the `attstr` argument to the `arcpagelist` handler in `application/api/controller/Ajax.php`, where the application calls PHP's `unserialize()` on unvalidated input. A public proof-of-concept exploit has been published and is available, lowering the barrier for opportunistic attackers. The vendor has acknowledged the flaw and committed to a fix in the upcoming v1.7.8 release; no confirmed active exploitation (KEV) has been recorded, and EPSS remains at 0.06%, indicating low observed in-the-wild activity at time of analysis.

Deserialization vulnerability in aizuda snail-job up to version 1.7.0 on macOS allows remote attackers with low privileges to execute arbitrary code by supplying malicious serialized data to the argsStr argument of the FurySerializer.deserialize function. Public exploit code is available, though no active exploitation has been confirmed at the time of analysis.

Remote deserialization in Dromara Sa-Token up to version 1.44.0 allows low-privileged authenticated attackers to transmit maliciously crafted serialized Java objects, potentially leading to limited data tampering or availability impacts. Exploitation is difficult (high complexity), and public exploit code exists, but EPSS score of 0.06% indicates low real-world exploitation likelihood. No active exploitation or CISA KEV listing has been confirmed.

Deserialization weakness in Dromara Sa-Token through version 1.44.0 allows a low-privileged authenticated remote attacker to trigger unsafe object deserialization through the SaJdkSerializer component's ObjectInputStream.readObject call, but only under a narrow set of preconditions. Exploitation requires an application that has explicitly enabled Sa-Token's JDK serialization backend and exposes a code path where attacker-controlled bytes reach readObject; per the assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) the impact is limited to availability with no confidentiality or integrity effect, and high attack complexity plus vendor-described difficult exploitability mean this is a low real-world risk despite the deserialization tag. No public exploit has been identified at time of analysis, the issue does not appear in CISA KEV, and the maintainers did not respond to early disclosure, so no vendor patch is confirmed.

Arbitrary code execution in InternLM LMDeploy 0.11 and earlier: the toolkit calls torch.load() without weights_only=True when loading model checkpoint files, so a malicious .bin, .pt or .pth checkpoint executes attacker-supplied code during deserialization. Exploitation is unauthenticated in the sense of no credentials (CVSS PR:N) but is gated by user interaction (UI:R) - the victim must deliberately point LMDeploy at an attacker-controlled checkpoint through the quantization/deployment APIs, the TurboMind PytorchLoader, or the VL model loader; requests to LMDeploy's serving path with trusted first-party weights are unaffected, and .safetensors checkpoints use a safe loader. Publicly available exploit code exists in the GitHub advisory, and the issue is resolved in 0.11.1; no confirmed active exploitation (CISA KEV) was identified at time of analysis.

PHP object injection in Icegram Express Pro (WordPress email marketing plugin) through version 5.9.13 enables unauthenticated remote attackers to execute arbitrary code via unsafe deserialization of user-controlled data. With CVSS 9.8 (critical severity) and network-accessible attack vector requiring no authentication or user interaction, this represents a severe pre-authentication RCE risk. EPSS score of 0.06% (19th percentile) suggests low immediate exploitation probability, and no public exploit or CISA KEV listing identified at time of analysis, though Patchstack disclosure increases attacker awareness.

A compromised or malicious Android device connected over USB/ADB can crash the scrcpy host client (versions up to and including 3.3.3, prior to commit 3e40b24) by sending crafted device messages that trigger out-of-bounds reads in sc_device_msg_deserialize(). Publicly available exploit code exists, but with an EPSS score of only 0.42% (34th percentile) and no CISA KEV listing, multiple signals point to a modest, situationally-bounded risk rather than a top-tier priority; per the assessed CVSS 3.1 vector the impact is availability only (client crash or denial of service) with no confirmed confidentiality or integrity loss, though the advisory notes this may enable further exploitation on the host system.

PHP object injection in the BoldThemes Codiqa WordPress theme allows unauthenticated remote attackers to inject arbitrary PHP objects into the application through unsafe deserialization of untrusted data. All versions below 1.2.8 are affected, and per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H = 9.8 Critical) no authentication or user interaction is required to reach the vulnerable unserialize() sink. No public exploit code has been identified at time of analysis and the vulnerability is not confirmed as actively exploited (no CISA KEV entry); EPSS is low at 0.38% (29th percentile), though that score likely reflects the narrow install base of this commercial theme rather than limited technical severity, and real-world impact is bounded by whether a usable POP gadget chain exists in the theme, an installed plugin, or WordPress core.

Unauthenticated PHP object injection in the WordPress plugin Client Invoicing by Sprout Invoices (sprout-invoices) up to and including version 20.8.7 lets remote attackers pass crafted serialized data into an unserialize() sink, which can trigger arbitrary object instantiation and, if a suitable POP gadget chain is loaded, full code execution or data compromise. The plugin's NVD/Patchstack vector is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), while our independent assessment scores it 9.8 with a higher attack complexity (AC:H) because real-world impact hinges on a usable gadget chain being present in the plugin, WordPress core, or another active plugin. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is low at 0.38% (29th percentile), so exploitation is currently assessed as plausible but not observed.

PHP object injection in PDF for Elementor Forms plugin through version 6.5.0 allows authenticated attackers to execute arbitrary code or manipulate application logic via deserialization of untrusted data. While CVSS scores this 8.8 (High), real-world risk is tempered by authentication requirement (PR:L) and low EPSS score (0.06%, 19th percentile), indicating minimal observed exploitation attempts. No CISA KEV listing or public exploit code identified, suggesting attacks remain theoretical rather than widespread.

Object injection via unsafe deserialization in PDF Invoice Builder for WooCommerce plugin allows authenticated attackers with low privileges to execute arbitrary PHP code, manipulate application objects, or trigger other malicious actions. Affects all versions through 6.5.0. No public exploit identified at time of analysis, with EPSS probability of 0.07% suggesting minimal real-world exploitation activity despite high CVSS score.

Object injection via unsafe deserialization in PDF for WPForms plugin (versions ≤6.5.0) enables authenticated attackers to execute arbitrary PHP code or manipulate application state. The CVSS score of 8.8 reflects network-based exploitation with low complexity requiring only low-privileged authentication. EPSS probability of 0.07% (22nd percentile) suggests limited exploitation likelihood. No public exploit code or CISA KEV listing identified at time of analysis, indicating this remains a theoretical risk requiring proactive patching.

Object injection via unsafe deserialization in PDF for Contact Form 7 WordPress plugin (versions ≤6.5.0) allows authenticated attackers to execute arbitrary PHP code or manipulate application state. Attack requires low-privileged user credentials but no user interaction, with network-accessible attack vector. EPSS probability remains low (0.07%, 22nd percentile) and no active exploitation confirmed at time of analysis. Publicly available exploit code exists per Patchstack disclosure.

PHP object injection in PDF for Gravity Forms + Drag And Drop Template Builder (WordPress plugin) versions up to 6.5.0 allows authenticated attackers with low privileges to execute arbitrary code or manipulate application logic via unsafe deserialization. CVSS 7.5 (High) but EPSS probability of 0.07% (22nd percentile) indicates low observed exploitation likelihood. No public exploit identified at time of analysis, and attack requires high complexity (AC:H) with authenticated access (PR:L).

Unauthenticated information disclosure in the Fancy Product Designer WordPress plugin (all versions up to and including 6.4.8) lets remote attackers read arbitrary files on the server, including wp-config.php, by supplying a crafted 'url' value to the plugin's fpd_custom_uplod_file AJAX action, which passes that value unsanitized into PHP's getimagesize(); the same code path can be abused for PHAR deserialization where a reachable phar archive and a usable PHP object gadget chain exist. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N, 5.9) confirms no credentials and no user interaction are required, but high attack complexity reflects server-specific preconditions, and impact is confined to confidentiality with no integrity or availability effect. There is no CISA KEV entry and no public exploit code identified at time of analysis, and EPSS is low at 0.31% (22nd percentile), so this is a moderate-priority exposure rather than an emergency patching event.

Remote code execution in the Pentaho Community Dashboard Editor (CDE) plugin can allow a low-privilege authenticated attacker to compromise affected Pentaho Data Integration and Analytics deployments through unsafe deserialization of untrusted JSON. Versions before 10.2.0.4, including 9.3.0.x and 8.3.x, are impacted when the CDE plugin is present; exploitation requires network access and a valid low-privilege account but no user interaction. No public exploit identified at time of analysis, and the vendor has released a fixed version at 10.2.0.4.

Deserialization vulnerability in Tiny RDM up to version 1.2.5 allows authenticated remote attackers to trigger unsafe pickle deserialization via the Pickle Decoding component, potentially leading to code execution. The attack requires high complexity and prior authentication, making practical exploitation difficult. Public exploit code is available, but the low EPSS score (0.10%) and absence of active exploitation tracking suggest limited real-world risk at present.

PHP object injection in Doubly Cross Domain Copy Paste plugin (≤1.0.46) allows authenticated attackers with Subscriber-level privileges to execute arbitrary code via deserialized untrusted input from uploaded ZIP archives. Exploitation requires administrators to explicitly enable Subscriber access. Available POP chains enable code execution, file deletion, and sensitive data retrieval. Attack vector requires low privilege (PR:L) authentication with network accessibility and no user interaction. No public exploit identified at time of analysis.

Remote code execution in the Apache HugeGraph PD (Placement Driver) store before 1.7.0 lets an attacker with network reachability to the internal Raft RPC endpoint inject malicious Hessian-serialized objects and execute arbitrary code on the PD node, per the independent assessment which rates the vector as AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity and availability impact. The root problem is twofold: Raft cluster membership was not restricted by IP-based authentication and Hessian deserialization had no class whitelist, so a rogue node that could reach the port could push crafted serialized payloads into the state machine. Fixes are available in Apache HugeGraph 1.7.0 (PR #2735 adds an IP whitelist channel handler and a hardened Hessian serializer factory); there is no public exploit identified at time of analysis and EPSS is low (0.89%, 58th percentile), with the main practical constraint being that the PD Raft channel is normally bound to an internal cluster network rather than the public internet.

PHP Object Injection in Visitor Logic Lite (versions ≤1.0.3) lets unauthenticated attackers supply a malicious serialized payload via the `lpblocks` cookie, which the lp_track() function passes directly to unserialize(). Successful exploitation for file deletion, data retrieval, or code execution requires an additional installed plugin or theme that provides a usable POP gadget chain, since the plugin itself contains none. No public exploit code has been identified at time of analysis, and EPSS is low at 0.54% (44th percentile), consistent with the conditional nature of the flaw.

Unsafe deserialization in React Server Components Server Function endpoints allows remote unauthenticated attackers to trigger an infinite loop that hangs the server process and can prevent subsequent HTTP requests from being served. The flaw affects React 19.0.2, 19.1.3, and 19.2.2 - including Next.js applications on Node.js that expose Server Functions (Server Actions) - and it represents an incomplete fix for CVE-2025-55184. EPSS is 19.99% (97th percentile), and no public exploit identified at time of analysis; CISA KEV does not list it as confirmed actively exploited.

Pre-authentication denial of service in React Server Components (versions 19.0.0 through 19.2.1) allows unauthenticated remote attackers to hang the server process by sending specially crafted payloads to Server Function endpoints, causing an infinite loop that prevents further HTTP requests from being served. This affects applications using the react-server-dom-parcel, react-server-dom-turbopack, or react-server-dom-webpack packages, commonly seen in Next.js App Router deployments. Publicly available exploit code exists (e.g., GitHub repository referenced), and the EPSS score is 66.88% (99th percentile), indicating a high likelihood of exploitation; however, there is no confirmation of active exploitation in CISA KEV.

Remote code execution in Google Cloud Data Fusion (built on the CDAP platform) allows an authenticated principal who holds artifact-upload permissions on an instance to execute arbitrary code inside the core AppFabric component through unsafe deserialization of a crafted artifact. Successful exploitation gives the attacker control of the Data Fusion instance, enabling unauthorized access to sensitive data, tampering with data pipelines, and reconnaissance of the underlying infrastructure. No public exploit code has been identified at time of analysis, the EPSS score is low (0.44%, 36th percentile), and the issue is not listed in CISA KEV, so it is a credible but non-emergency authenticated RCE that still warrants prompt patching. Vendor-released fixes are available in CDAP 6.10.6+ and 6.11.1+.